| CVE-2026-21014 | 低2.8 | Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability. | 13/04/2026 |
| CVE-2026-21013 | 中5.5 | Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information. | 13/04/2026 |
| CVE-2026-40446 | 緊急9.8 | Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. | 13/04/2026 |
| CVE-2026-25209 | 緊急9.1 | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. | 13/04/2026 |
| CVE-2026-25208 | 緊急9.8 | Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. | 13/04/2026 |
| CVE-2026-25207 | 緊急9.8 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. | 13/04/2026 |
| CVE-2026-25206 | 緊急9.1 | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. | 13/04/2026 |
| CVE-2026-25205 | 緊急9.8 | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash
97e8115ab1110bc502b4b5e4a0c689a71520d335
. | 13/04/2026 |
| CVE-2026-25204 | 高7.5 | Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort.
This issue affects escarogt prior to commit hash
97e8115ab1110bc502b4b5e4a0c689a71520d335 | 13/04/2026 |
| CVE-2026-21005 | 中6.5 | Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege. | 16/03/2026 |
| CVE-2026-21004 | 中6.5 | Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service. | 16/03/2026 |
| CVE-2026-21002 | 中5.5 | Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application. | 16/03/2026 |
| CVE-2026-21001 | 中5.5 | Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege. | 16/03/2026 |
| CVE-2026-21000 | 中5.5 | Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege. | 16/03/2026 |
| CVE-2026-20999 | 高7.5 | Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions. | 16/03/2026 |
| CVE-2026-20998 | 緊急9.8 | Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication. | 16/03/2026 |
| CVE-2026-20997 | 緊急9.8 | Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication. | 16/03/2026 |
| CVE-2026-20996 | 中5.3 | Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication. | 16/03/2026 |
| CVE-2026-20995 | 中5.3 | Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration. | 16/03/2026 |
| CVE-2026-20994 | 中6.1 | URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token. | 16/03/2026 |