Vulnerabilities in Samsung Mobile
1,419 resultsCVE-2026-21075MEDIUMImproper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive informEPSS 0.5%CVE-2022-39890MEDIUMImproper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information.EPSS 0.5%CVE-2022-24926MEDIUMImproper input validation vulnerability in SmartTagPlugin prior to version 1.2.15-6 allows privileged attackers to trigger a XSS on a victimEPSS 0.5%CVE-2024-34596MEDIUMImproper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for members set by the EPSS 0.5%CVE-2022-39892LOWImproper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.EPSS 0.5%CVE-2021-25480MEDIUMA lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead tEPSS 0.5%CVE-2021-25354LOWImproper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via EPSS 0.5%CVE-2026-21092HIGHPath traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.EPSS 0.5%CVE-2026-20973MEDIUMOut-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory.EPSS 0.5%CVE-2024-34659HIGHExposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group.EPSS 0.5%CVE-2022-39891MEDIUMHeap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get informaEPSS 0.5%CVE-2025-58488MEDIUMImproper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensEPSS 0.5%CVE-2024-49418MEDIUMInsufficient verification of url authenticity in GamingHub prior to version 6.1.03.4 in Korea, 7.1.02.4 in Global allows remote attackers toEPSS 0.5%CVE-2022-30735MEDIUMImproper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the access_token without permissioEPSS 0.5%CVE-2022-23994LOWAn Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted EPSS 0.4%CVE-2023-42551MEDIUMUse of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows atEPSS 0.4%CVE-2023-42549MEDIUMUse of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.EPSS 0.4%CVE-2023-42547MEDIUMUse of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00EPSS 0.4%CVE-2023-42546MEDIUMUse of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.EPSS 0.4%CVE-2023-42550MEDIUMUse of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackeEPSS 0.4%