Read the docs

Samsung

Records2044All Threatist records
Exploited (KEV)16In CISA KEV
CVSS critical180CVSS 9.0–10.0
CVSS high708CVSS 7.0–8.9

Exploited now

Samsung records in CISA KEV
TI-2024-06858 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-04-24TI-2025-15038 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-11-10TI-2025-15039 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-10-02TI-2025-04133 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2025-05-22TI-2022-06595 Samsung Mobile Devices Use-After-Free Vulnerability Priority CRITICAL 93KEV 2023-09-18TI-2021-07610 Samsung Mobile Devices Unspecified Vulnerability Priority CRITICAL 89KEV 2023-06-29

Components

Products in the NVD configurations · select one to filter the records
Android 502 records CRITICAL Exynos 1380 Firmware 125 records MEDIUM Exynos 1280 Firmware 118 records HIGH Exynos 980 Firmware 114 records HIGH Exynos 1330 Firmware 99 records MEDIUM Exynos 1080 Firmware 97 records HIGH Exynos 850 Firmware 97 records HIGH Exynos 1480 Firmware 90 records MEDIUM

Records

19 records in Wear Os · all components

TI-2025-14942 CVE-2025-20946 · GHSA-c8pp-hw6h-x368

Improper handling of exceptional conditions in pairing specific bluetooth devices in…

Priority MEDIUM 40

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without u…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00275 Published 2025-04-08 Fixed in SMR Apr-2025 Release in Android Watch 14
TI-2025-14980 CVE-2025-20984 · GHSA-wxjj-4fcq-qrjq

Incorrect default permissions in Samsung Mobile Devices

Priority LOW 29

Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00147 Published 2025-06-04 Fixed in SMR Jun-2025 Release in Android Watch 14 CWE-276
TI-2025-14941 CVE-2025-20945 · GHSA-535p-c89j-pqj5

Insecure storage of sensitive information in Samsung Mobile Devices

Priority LOW 27

Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00166 Published 2025-04-08 Fixed in SMR Apr-2025 Release in Android Watch 14 CWE-922
TI-2025-14908 CVE-2025-20912 · GHSA-w82f-ppmw-v55m

Insecure storage of sensitive information in Samsung Mobile Devices

Priority LOW 27

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00154 Published 2025-03-06 Fixed in SMR Mar-2025 Release in Android Watch 14 CWE-922
TI-2025-14906 CVE-2025-20910 · GHSA-5q3h-6jgm-m9jp

Incorrect default permissions in Samsung Mobile Devices

Priority LOW 27

Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00154 Published 2025-03-06 Fixed in SMR Mar-2025 Release in Android Watch 14 CWE-276
TI-2025-15000 CVE-2025-21004 · GHSA-8xj4-3gr5-xw39

Improper signature verification in Samsung Mobile Devices

Priority LOW 26

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00093 Published 2025-07-08 Fixed in SMR Jul-2025 Release in Android Watch 14 CWE-347
TI-2025-15041 CVE-2025-21045 · GHSA-95jf-qjgq-gpr6

Insecure storage of sensitive information in Samsung Mobile Devices

Priority LOW 24

Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00128 Published 2025-10-10 Fixed in SMR Oct-2025 Release in Android Watch 14 CWE-922
TI-2022-08735 CVE-2022-24930 · GHSA-p5c4-8m5x-vh8p

Improper access control in Samsung Wearable Devices

Priority LOW 21

An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Release allows untrusted applications to reset default app settings without a proper permission

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00429 Published 2022-03-08 Fixed in Firmware update Mar-2022 Release CWE-284
TI-2022-07959 CVE-2022-23997 · GHSA-gv9g-pxv2-vq9v

Improper access control in Samsung Wearable Devices

Priority LOW 19

Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a proper permission.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00438 Published 2022-02-11 Fixed in Firmware update Feb-2022 Release CWE-284
TI-2022-07958 CVE-2022-23996 · GHSA-6x8m-f958-q43m

Improper access control in Samsung Wearable Devices

Priority LOW 19

Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to enable bedtime mode without a proper permission.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00438 Published 2022-02-11 Fixed in Firmware update Feb-2022 Release CWE-284
TI-2022-07957 CVE-2022-23995 · GHSA-7mpc-29w7-wf38

Improper access control in Samsung Wearable Devices

Priority LOW 19

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00438 Published 2022-02-11 Fixed in Firmware update Feb-2022 Release CWE-284
TI-2022-07956 CVE-2022-23994 · GHSA-wrf8-w7q7-mfr4

Improper access control in Samsung Wearable Devices

Priority LOW 16

An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00449 Published 2022-02-11 Fixed in Firmware update Feb-2022 Release CWE-284
Open these records in search →