CVE-2026-21019 is a high-severity vulnerability affecting Samsung Mobile Devices, specifically in the FacAtFunction component of Galaxy Watch models prior to the SMR May-2026 Release 1. It involves improper input validation that allows a local attacker to execute arbitrary code with system privileges. The vulnerability has a CVSS 4.0 base score of 8.9, indicating a significant risk. There is no official patch or remediation level confirmed yet, and no known exploits in the wild have been reported. The vendor has not provided explicit guidance or a fix at this time.
CVE-2026-21018 is an out-of-bounds write vulnerability in the SveService component of Samsung Mobile Devices prior to the SMR May-2026 Release 1. This flaw allows local attackers with privileged access to execute arbitrary code. The vulnerability has a CVSS 4.0 base score of 6.8, indicating a medium severity level. No official patch or remediation guidance has been provided yet by the vendor. There are no known exploits in the wild at this time.
Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.
CVE-2026-21010 is a vulnerability in Samsung Mobile Devices involving improper input validation in Retail Mode before the SMR April 2026 Release 1. This flaw allows local attackers with limited privileges to trigger privileged functions without user interaction. The vulnerability has a CVSS score of 6.6, indicating a medium severity level. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild. The vulnerability affects Samsung Mobile Devices generally, with no specific versions detailed. The vendor has not issued an advisory or fix at this time.
CVE-2026-21008 is a medium severity vulnerability affecting Samsung Mobile Devices. It involves exposure of sensitive information in the S Share feature prior to the SMR April 2026 Release 1. The vulnerability allows an adjacent attacker to access sensitive information without requiring privileges or user interaction. No official patch or remediation level has been confirmed yet. The vulnerability has a CVSS 4.0 base score of 5.1, indicating a moderate risk. There are no known exploits in the wild at this time.
CVE-2026-21014 is an improper access control vulnerability in Samsung Camera versions prior to 16.5.00.28. It allows a local attacker with limited privileges to access location data. Exploitation requires user interaction. The vulnerability has a medium severity rating with a CVSS score of 5.1.
CVE-2026-21013 is a medium severity vulnerability in Samsung Mobile's Galaxy Wearable application prior to version 2.2.68.26. It involves incorrect default permissions that allow local attackers to access sensitive information. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a moderate risk. There is no official patch or remediation level provided in the available data. No known exploits in the wild have been reported.
CVE-2026-21012 is a medium severity vulnerability in Samsung Mobile Devices affecting the AODManager component prior to the SMR April 2026 Release 1. It involves external control of the file name or path, allowing a privileged local attacker to create files with system privileges. The vulnerability requires local privileged access and does not involve user interaction. No official patch or remediation level has been confirmed yet.
CVE-2026-21011 is a medium severity vulnerability in Samsung Mobile Devices involving incorrect privilege assignment in Bluetooth during Maintenance mode. This flaw allows physical attackers to bypass the Extend Unlock security feature. The vulnerability is identified as CWE-266, indicating improper privilege management. It affects devices prior to the SMR April 2026 Release 1. There is no official patch or remediation level provided yet, and no known exploits in the wild have been reported.
CVE-2026-21009 is a medium severity vulnerability in Samsung Mobile Devices involving an improper check for exceptional conditions in the Recents feature prior to the SMR April 2026 Release 1. This flaw allows a physical attacker to bypass the App Pinning security feature. The vulnerability has a CVSS 4.1 score, indicating a moderate risk. No official patch or remediation level has been confirmed yet. There are no known exploits in the wild at this time.
CVE-2026-21007 is a medium severity vulnerability affecting Samsung Mobile Devices. It involves an improper check for exceptional conditions in the Device Care component prior to the SMR April 2026 Release 1. This flaw allows physical attackers to bypass the Knox Guard security feature. The vulnerability has a CVSS 4.4 score, indicating a moderate risk. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild at this time.
CVE-2026-21006 is a medium severity vulnerability in Samsung DeX on Samsung Mobile Devices prior to the SMR Apr-2026 Release 1. It involves improper access control that allows physical attackers to access hidden notification contents. The vulnerability does not require user interaction or privileges and has a low attack complexity. No official patch or remediation level is currently confirmed from the vendor advisory. There are no known exploits in the wild at this time.
CVE-2026-21003 is a medium severity vulnerability in Samsung Mobile Devices involving improper input validation of data related to network restrictions. This flaw exists in device software versions prior to the SMR April 2026 Release 1. It allows physical attackers to bypass network restrictions by exploiting the improper validation. The vulnerability has a CVSS 4.0 base score of 5.2, indicating moderate impact. There is no official patch or remediation level currently confirmed from the vendor. No known exploits are reported in the wild at this time.
