Browse CVEs

MEDIUM 5.3 CVE-2026-21075 Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information. No fix yet Fix from $1,6002026-08-10 HIGH 7.2 CVE-2026-21074 Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege. No fix yet Fix from $1,9502026-08-10 MEDIUM 6.1 CVE-2026-21073 Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity. Android No fix yet Fix from $1,6002026-08-10 HIGH 7.8 CVE-2026-21072 Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. Android No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-21071 Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. Android No fix yet Fix from $1,9502026-08-10 MEDIUM 5.1 CVE-2026-21070 Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information. No fix yet Fix from $1,6002026-08-10 HIGH 7.8 CVE-2026-21069 Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds… Android No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-21068 Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code. Android No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-21065 Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. Android No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-21067 Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. Android No fix yet Fix from $1,9502026-08-10 HIGH 7.8 CVE-2026-21066 Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. Android No fix yet Fix from $1,9502026-08-10 MEDIUM 5.5 CVE-2026-21064 Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability. Android No fix yet Fix from $1,6002026-08-10 MEDIUM 6.1 CVE-2026-21063 Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function. Android No fix yet Fix from $1,6002026-08-10 HIGH 8.6 CVE-2026-64940 Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an a… No fix yet Fix from $1,9502026-08-10 MEDIUM 6.8 CVE-2026-57279 Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web brows… No fix yet Fix from $1,6002026-08-10 MEDIUM 6.5 CVE-2026-21061 Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction… Android No fix yet Fix from $1,6002026-08-10 MEDIUM 6.7 CVE-2026-21060 Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles. No fix yet Fix from $1,6002026-08-10 HIGH 7.1 CVE-2026-21059 Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Sams… Android No fix yet Fix from $1,9502026-08-10 HIGH 7.1 CVE-2026-21058 Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege. Android No fix yet Fix from $1,9502026-08-10 CRITICAL 9.8 CVE-2026-19089 The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left … No fix yet Fix from $2,3002026-08-10 MEDIUM 6.5 CVE-2026-19077 The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and delete operations, allowing an… No fix yet Fix from $1,6002026-08-10 MEDIUM 5.0 CVE-2026-19075 All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=<post_id>` on any `aiovg_videos` post (`public/… No fix yet Fix from $1,6002026-08-10 MEDIUM 5.3 CVE-2026-19074 The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) is vulnerable to unauthenticat… No fix yet Fix from $1,6002026-08-10 CRITICAL 9.1 CVE-2026-19053 The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unau… No fix yet Fix from $2,3002026-08-10 HIGH 8.6 CVE-2026-19049 The ProSolution WP Client WordPress plugin before 2.0.9 does not sanitise a cookie value before using it in SQL queries, and processes that cookie on… No fix yet Fix from $1,9502026-08-10 MEDIUM 5.4 CVE-2026-18960 The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who hol… No fix yet Fix from $1,6002026-08-10 MEDIUM 5.5 CVE-2026-18934 The RSS Aggregator by Feedzy WordPress plugin before 5.2.6 does not verify that the requesting user owns or is allowed to edit the import job named … No fix yet Fix from $1,6002026-08-10 HIGH 8.8 CVE-2026-18786 The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the … No fix yet Fix from $1,9502026-08-10 HIGH 8.1 CVE-2026-18469 The Login & Register Forms WordPress plugin before 4.0.2 does not enforce its password reset attempt limit against a server-derived value, keying bo… No fix yet Fix from $1,9502026-08-10 HIGH 8.1 CVE-2026-18468 The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the account being reset or to the pa… No fix yet Fix from $1,9502026-08-10