Samsung-mobile
1,372 CVEs tracked since 2021. Since Jul 2021, 6 of them reached CISA KEV.
Samsung-mobile CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2021-07 | 17 | 0 |
| 2021-08 | 6 | 0 |
| 2021-09 | 18 | 0 |
| 2021-10 | 33 | 2 |
| 2021-11 | 10 | 0 |
| 2021-12 | 18 | 0 |
| 2022-01 | 18 | 1 |
| 2022-02 | 26 | 0 |
| 2022-03 | 22 | 0 |
| 2022-04 | 55 | 0 |
| 2022-05 | 14 | 0 |
| 2022-06 | 41 | 0 |
| 2022-07 | 38 | 0 |
| 2022-08 | 33 | 0 |
| 2022-09 | 40 | 0 |
| 2022-10 | 33 | 0 |
| 2022-11 | 14 | 0 |
| 2022-12 | 22 | 0 |
| 2023-01 | 3 or fewer | |
| 2023-02 | 32 | 0 |
| 2023-03 | no snapshot | |
| 2023-04 | 3 or fewer | |
| 2023-05 | 31 | 1 |
| 2023-06 | 4 | 0 |
| 2023-07 | 38 | 0 |
| 2023-08 | 26 | 0 |
| 2023-09 | 24 | 0 |
| 2023-10 | 11 | 0 |
| 2023-11 | 30 | 0 |
| 2023-12 | 26 | 0 |
| 2024-01 | 8 | 0 |
| 2024-02 | 18 | 0 |
| 2024-03 | 14 | 0 |
| 2024-04 | 13 | 0 |
| 2024-05 | 19 | 0 |
| 2024-06 | 15 | 0 |
| 2024-07 | 33 | 0 |
| 2024-08 | 33 | 0 |
| 2024-09 | 25 | 0 |
| 2024-10 | 11 | 0 |
| 2024-11 | 19 | 0 |
| 2024-12 | 13 | 0 |
| 2025-01 | 4 or fewer | |
| 2025-02 | 26 | 0 |
| 2025-03 | 27 | 0 |
| 2025-04 | 17 | 0 |
| 2025-05 | 30 | 0 |
| 2025-06 | 13 | 0 |
| 2025-07 | 15 | 0 |
| 2025-08 | 16 | 0 |
| 2025-09 | 40 | 2 |
| 2025-10 | 26 | 0 |
| 2025-11 | 8 | 0 |
| 2025-12 | 16 | 0 |
| 2026-01 | 9 | 0 |
| 2026-02 | 11 | 0 |
| 2026-03 | 17 | 0 |
| 2026-04 | 11 | 0 |
| 2026-05 | 8 | 0 |
| 2026-06 | 15 | 0 |
| 2026-07 | 19 | 0 |
| 2026-08 | 27 | 0 |
| 2026-09 | 29 | 0 |
| 2026-10 | 28 | 0 |
| 2026-11 | 0 |
Products
The products that kept showing up in Samsung-mobile's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Samsung-mobile.
- CVE-2026-21157Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.—
- CVE-2026-21139Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.—
- CVE-2026-21138Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.—
- CVE-2026-21137Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.—
- CVE-2026-21136Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.—
- CVE-2026-21135Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.—
- CVE-2026-21134Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.—
- CVE-2026-21133Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.—
- CVE-2026-21132Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.—
- CVE-2026-21131Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.—
- CVE-2026-21130Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.—
- CVE-2026-21129Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.—
- CVE-2026-21128Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.—
- CVE-2026-21127Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.—
- CVE-2026-21126Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.—
The record
- Peak rank
- #16 in Apr 2022
- Busiest month shown
- Apr 2022, 55 CVEs
- Months with a KEV entry
- 4 since Jul 2021
- Monthly snapshots
- 62 since 2021