Browse CVEs

CRITICAL 9.1 CVE-2026-25206 Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a… Escargot Patch available Fix from $2,3002026-04-13 CRITICAL 9.1 CVE-2026-25209 Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a… Escargot Patch available Fix from $2,3002026-04-13 MEDIUM 6.8 CVE-2026-21003 Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restriction… Android Mitigation only Fix from $1,6002026-04-13 HIGH 7.5 CVE-2026-25204 Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. Th… Escargot 2026-03-28+ Fix from $1,9502026-04-13 CRITICAL 9.8 CVE-2025-52908 An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W… Exynos W1000 Firmware Mitigation only Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2025-62818 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 24… Exynos 990 Firmware Mitigation only Fix from $2,3002026-04-07 CRITICAL 9.8 CVE-2025-52909 An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W… Exynos W1000 Firmware Mitigation only Fix from $2,3002026-04-07 HIGH 7.0 CVE-2025-54601 An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W… Exynos 980 Firmware Mitigation only Fix from $1,9502026-04-06 CRITICAL 10.0 CVE-2025-54328 An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1… Exynos 980 Firmware Mitigation only Fix from $2,3002026-04-06 HIGH 7.5 CVE-2025-57834 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2… Exynos 980 Firmware Mitigation only Fix from $1,9502026-04-06 HIGH 7.0 CVE-2025-54602 An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W… Exynos 980 Firmware Mitigation only Fix from $1,9502026-04-06 CRITICAL 9.1 CVE-2025-58349 An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 14… Exynos 990 Firmware Mitigation only Fix from $2,3002026-04-06 HIGH 7.5 CVE-2025-54324 An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1… Exynos 990 Firmware Mitigation only Fix from $1,9502026-04-06 HIGH 7.5 CVE-2025-57835 An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1… Exynos 990 Firmware Mitigation only Fix from $1,9502026-04-06 HIGH 7.5 CVE-2025-59440 An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, … Exynos 990 Firmware Mitigation only Fix from $1,9502026-04-06 MEDIUM 6.5 CVE-2026-21004 Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service. Smart Switch 3.7.69.15+ Fix from $1,6002026-03-16 MEDIUM 6.5 CVE-2026-21005 Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege. Smart Switch 3.7.69.15+ Fix from $1,6002026-03-16 MEDIUM 5.5 CVE-2026-21000 Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege. Galaxy Store 4.6.03.8+ Fix from $1,6002026-03-16 MEDIUM 5.5 CVE-2026-21001 Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege. Galaxy Store 4.6.03.8+ Fix from $1,6002026-03-16 MEDIUM 5.5 CVE-2026-21002 Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application. Galaxy Store 4.6.03.8+ Fix from $1,6002026-03-16 CRITICAL 9.8 CVE-2026-20997 Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authenticat… Smart Switch 3.7.69.15+ Fix from $2,3002026-03-16 CRITICAL 9.8 CVE-2026-20998 Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication. Smart Switch 3.7.69.15+ Fix from $2,3002026-03-16 HIGH 7.5 CVE-2026-20999 Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions. Smart Switch 3.7.69.15+ Fix from $1,9502026-03-16 MEDIUM 6.1 CVE-2026-20994 URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token. Account 15.5.01.1+ Fix from $1,6002026-03-16 MEDIUM 5.5 CVE-2026-20993 Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information. Assistant 9.3.10.7+ Fix from $1,6002026-03-16 MEDIUM 5.3 CVE-2026-20995 Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific con… Smart Switch 3.7.69.15+ Fix from $1,6002026-03-16 MEDIUM 5.3 CVE-2026-20996 Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme … Smart Switch 3.7.69.15+ Fix from $1,6002026-03-16 HIGH 8.1 CVE-2026-20990 Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activit… Android Mitigation only Fix from $1,9502026-03-16 MEDIUM 5.0 CVE-2026-20988 Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary activity … Android Mitigation only Fix from $1,6002026-03-16 HIGH 7.5 CVE-2025-62817 An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of session->ncp_h… Exynos 1280 Firmware Mitigation only Fix from $1,9502026-03-03