Threat database

CVE-2026-21131 is a low-severity vulnerability in Samsung Flow prior to version 4.9.22.4. It involves incorrect default permissions that allow local attackers to launch arbitrary activities with Samsung Flow privileges on a connected device.

CVE-2026-21130 is a medium severity vulnerability in Samsung Checkout prior to version 5.1.03.1. It involves improper input validation in the CreditCardRetrieveActivity component, which allows local attackers to launch arbitrary activities with Samsung Checkout privileges.

CVE-2026-21129 is a medium severity vulnerability in Samsung Checkout prior to version 5.1.03.1. It involves improper input validation in the GuestCreditCardRegisterActivity component, which allows local attackers to launch arbitrary activities with Samsung Checkout privileges.

CVE-2026-21128 is an improper input validation vulnerability in the CreditCardRegisterActivity component of Samsung Checkout prior to version 5.1.03.1. This flaw allows local attackers to launch arbitrary activities with Samsung Checkout privileges. The vulnerability has a medium severity score of 5.1 (CVSS 4.0). No known exploits or patches are currently documented.

CVE-2026-21127 is a vulnerability in Samsung Account prior to version 15.7.01.1 where improper export of Android application components allows local attackers to access sensitive data. The issue is classified under CWE-926, indicating improper export of components. The vulnerability has a CVSS 4.0 base score of 6.9, reflecting a medium severity level. No patch or remediation details are provided in the available data.

CVE-2026-21126 is an improper input validation vulnerability in Samsung Mobile Devices affecting the libsimba.heifdec.media.samsung.so component prior to the SMR Oct-2026 Release 1. This flaw allows local attackers to write out-of-bounds memory, potentially leading to memory corruption. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. No official patch or remediation details are provided in the available data.

CVE-2026-21125 is a high-severity vulnerability in Samsung Mobile Devices involving improper input validation in the parsing of 'sheifd' within the library libsimba.heifdec.media.samsung.so. This flaw affects versions prior to the Samsung Mobile Security Release (SMR) October 2026 Release 1. It allows local attackers to potentially execute arbitrary code on the device without requiring user interaction or elevated privileges.

CVE-2026-21124 is a high-severity vulnerability in Samsung Mobile Devices involving improper input validation in the component libsimba.heifdec.media.samsung.so. This flaw affects the process of obtaining cover images and can allow local attackers to potentially execute arbitrary code. The vulnerability exists in versions prior to the SMR Oct-2026 Release 1. No known exploits are reported in the wild, and no patch links are provided in the available data.

CVE-2026-21123 is a medium severity vulnerability in Samsung Mobile Devices involving improper privilege management in the Locksettings component. It affects devices prior to the SMR Oct-2026 Release 1. Local attackers with root privileges can access data of the tied profile before the device's first unlock. The vulnerability does not require user interaction and has a low attack complexity. No known exploits are reported in the wild.

CVE-2026-21122 is a high-severity vulnerability involving an out-of-bounds write in the libsamsungtts.so component of Samsung Mobile Devices. This flaw exists in versions prior to the SMR Oct-2026 Release 1. It allows local attackers to execute arbitrary code on affected devices without requiring user interaction or elevated privileges.

CVE-2026-21121 is a medium severity vulnerability in Samsung Mobile Devices involving improper handling of insufficient permissions in the CmcCore component prior to the SMR Oct-2026 Release 1. This flaw allows local attackers to access privileged APIs without proper authorization.

CVE-2026-21120 is a use-after-free vulnerability in the WSM service of Samsung Mobile Devices prior to the SMR October 2026 Release 1. This flaw allows local attackers to potentially execute arbitrary code with system privileges. The vulnerability has a high severity score of 8.9 according to CVSS 4.0. No specific affected versions or patch information is provided.

CVE-2026-21119 is a medium severity vulnerability involving an out-of-bounds read and write in the lib_sag_ai_sound_sep_v2.00.so component of Samsung Mobile Devices. This flaw allows local attackers to access memory beyond intended boundaries. It affects versions prior to the SMR Oct-2026 Release 1. The vulnerability requires local privileges and has low attack complexity, with no user interaction needed. No known exploits are reported in the wild.

CVE-2026-21118 is an improper access control vulnerability in the DownloadProvider component of Samsung Mobile Devices. It affects versions prior to the SMR Oct-2026 Release 1. This flaw allows local attackers with limited privileges to access files within scoped storage, potentially exposing sensitive data. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a medium severity. There are no known exploits in the wild at this time.

CVE-2026-21117 is an improper access control vulnerability in the CocktailBarService component of Samsung Mobile Devices prior to the SMR Oct-2026 Release 1. This flaw allows local attackers to access sensitive information without proper authorization. The vulnerability has a medium severity with a CVSS 4.0 score of 5.1. No specific affected versions or patches are provided in the available data.

CVE-2026-21116 is an out-of-bounds write vulnerability in the libsmkvextractor.so component of Samsung Mobile Devices. It affects versions prior to the SMR Oct-2026 Release 1. The flaw allows local attackers to write outside the intended memory bounds, potentially leading to memory corruption. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.1. No known exploits are reported in the wild. No explicit patch or remediation details are provided in the available data.

CVE-2026-21115 is an out-of-bounds write vulnerability in the libcodec2-sec-flacdec.so component of Samsung Mobile Devices. It affects versions prior to the SMR Oct-2026 Release 1. The flaw allows local attackers to write outside the intended memory bounds, potentially leading to memory corruption. The vulnerability has a CVSS 4.0 base score of 5.1, indicating medium severity. A patch is available to address this issue. The vulnerability does not require user interaction and has no known exploits in the wild at this time.

CVE-2026-21114 is a high-severity vulnerability in Samsung Mobile Devices involving an out-of-bounds write in the libsmkvextractor.so component. This flaw exists in versions prior to the SMR Oct-2026 Release 1. It allows local attackers to execute arbitrary code on affected devices without requiring user interaction.

CVE-2026-87690 is a path traversal vulnerability in the Metasploit Framework's post module post/apple_ios/gather/ios_image_gather. It allows an attacker controlling a hostile iOS device to write arbitrary files on the pentester's workstation by manipulating file names in a directory listing. This can lead to persistent code execution as the operator, potentially with root privileges, when msfconsole is next launched. The issue arises from lack of sanitization of file names before writing to the local filesystem. A fix involves sanitizing file names to prevent directory traversal.

CVE-2026-108801 is a medium severity vulnerability in prasathmani TinyFileManager up to version 2.6. It involves an unrestricted file upload flaw in the move_uploaded_file function within tinyfilemanager.php. This vulnerability allows remote attackers to upload files without proper restrictions. The exploit code has been publicly released. The vendor was contacted but did not respond or provide a fix.