CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. |
| 13/04/2026 |
| CVE-2026-25208 | CRÍTICO9.8 | Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. | 13/04/2026 |
| CVE-2026-25207 | CRÍTICO9.8 | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. | 13/04/2026 |
| CVE-2026-25206 | CRÍTICO9.1 | Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. | 13/04/2026 |
| CVE-2026-25205 | CRÍTICO9.8 | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash
97e8115ab1110bc502b4b5e4a0c689a71520d335
. | 13/04/2026 |
| CVE-2026-25204 | ALTO7.5 | Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort.
This issue affects escarogt prior to commit hash
97e8115ab1110bc502b4b5e4a0c689a71520d335 | 13/04/2026 |
| CVE-2026-21005 | MÉDIO6.5 | Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege. | 16/03/2026 |
| CVE-2026-21004 | MÉDIO6.5 | Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service. | 16/03/2026 |
| CVE-2026-21002 | MÉDIO5.5 | Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application. | 16/03/2026 |
| CVE-2026-21001 | MÉDIO5.5 | Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege. | 16/03/2026 |
| CVE-2026-21000 | MÉDIO5.5 | Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege. | 16/03/2026 |
| CVE-2026-20999 | ALTO7.5 | Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions. | 16/03/2026 |
| CVE-2026-20998 | CRÍTICO9.8 | Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication. | 16/03/2026 |
| CVE-2026-20997 | CRÍTICO9.8 | Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication. | 16/03/2026 |
| CVE-2026-20996 | MÉDIO5.3 | Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication. | 16/03/2026 |
| CVE-2026-20995 | MÉDIO5.3 | Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration. | 16/03/2026 |
| CVE-2026-20994 | MÉDIO6.1 | URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token. | 16/03/2026 |