CVE-2026-21007 is a medium severity vulnerability affecting Samsung Mobile Devices. It involves an improper check for exceptional conditions in the Device Care component prior to the SMR April 2026 Release 1. This flaw allows physical attackers to bypass the Knox Guard security feature. The vulnerability has a CVSS 4.4 score, indicating a moderate risk. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild at this time.
CVE-2026-21006 is a medium severity vulnerability in Samsung DeX on Samsung Mobile Devices prior to the SMR Apr-2026 Release 1. It involves improper access control that allows physical attackers to access hidden notification contents. The vulnerability does not require user interaction or privileges and has a low attack complexity. No official patch or remediation level is currently confirmed from the vendor advisory. There are no known exploits in the wild at this time.
CVE-2026-21003 is a medium severity vulnerability in Samsung Mobile Devices involving improper input validation of data related to network restrictions. This flaw exists in device software versions prior to the SMR April 2026 Release 1. It allows physical attackers to bypass network restrictions by exploiting the improper validation. The vulnerability has a CVSS 4.0 base score of 5.2, indicating moderate impact. There is no official patch or remediation level currently confirmed from the vendor. No known exploits are reported in the wild at this time.
CVE-2026-40446 is a medium severity vulnerability in Samsung Open Source Escargot involving a type confusion flaw (CWE-843) that allows access of a resource using an incompatible type, leading to pointer manipulation. The affected version is identified by the commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335. The vulnerability has a CVSS 3.1 base score of 6.9, indicating a moderate risk with low attack vector (local), high attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability. No official patch or remediation guidance is currently available, and there are no known exploits in the wild. The vulnerability is not related to a cloud service and no geographic targeting is indicated.
CVE-2026-25209 is an out-of-bounds read vulnerability in Samsung Open Source Escargot version 97e8115ab1110bc502b4b5e4a0c689a71520d335. This vulnerability can lead to resource leak exposure. It has a CVSS 3.1 base score of 6.5, indicating a medium severity level. There is no official patch or remediation guidance currently available. No known exploits are reported in the wild. The vulnerability does not affect a cloud service and no geographic targeting is indicated.
CVE-2026-25208 is an integer overflow vulnerability in Samsung Open Source Escargot version 97e8115ab1110bc502b4b5e4a0c689a71520d335. The flaw allows for buffer overflow conditions due to improper handling of integer values. This vulnerability has a high severity rating with a CVSS score of 8.1, indicating it can lead to significant confidentiality, integrity, and availability impacts. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild at this time.
CVE-2026-25207 is a high-severity out-of-bounds write vulnerability in Samsung Open Source Escargot, identified as CWE-787. It affects a specific version of Escargot (commit 97e8115ab1110bc502b4b5e4a0c689a71520d335). This vulnerability can cause buffer overflow conditions leading to potential compromise of confidentiality, integrity, and availability. There is no vendor-provided patch or official remediation available at this time, and no known exploits have been reported in the wild.
CVE-2026-25206 is an out-of-bounds read vulnerability in Samsung Open Source Escargot version 97e8115ab1110bc502b4b5e4a0c689a71520d335. This vulnerability can lead to resource leak exposure. It has a CVSS 3.1 base score of 6.7, indicating medium severity. The vulnerability requires local access with high attack complexity and no privileges or user interaction. There is no official patch or remediation information available at this time, and no known exploits in the wild have been reported.
CVE-2026-25205 is a heap-based buffer overflow vulnerability in Samsung Open Source Escargot, identified in a specific commit version. This vulnerability allows an out-of-bounds write, potentially leading to high impact on confidentiality, integrity, and availability. The vulnerability has a CVSS score of 7.4, indicating high severity. There is no vendor-provided patch or official remediation guidance available at this time. No known exploits are reported in the wild. The affected product is not a cloud service, so remediation depends on vendor or user action. No specific countries are identified as affected.
Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort.
This issue affects escarogt prior to commit hash
97e8115ab1110bc502b4b5e4a0c689a71520d335
CVE-2026-25203 is a local privilege escalation vulnerability in Samsung MagicINFO 9 Server versions earlier than 21.1091.1. The issue arises from incorrect default permissions, which could allow a local attacker with limited privileges to escalate their access rights. The vulnerability has a high severity rating with a CVSS score of 7.8, indicating significant potential impact on confidentiality, integrity, and availability. There is no vendor-provided patch or official remediation guidance available at this time. No known exploits in the wild have been reported. Users of affected versions should monitor vendor advisories for updates and apply patches once available.
Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication.
