Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

19 records

Vendor: Samsung Component: Wear Os Clear all filters
TI-2025-15041 CVE-2025-21045 · GHSA-95jf-qjgq-gpr6

Insecure storage of sensitive information in Samsung Mobile Devices

Priority LOW 24

Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00128 Published 2025-10-10 Fixed in SMR Oct-2025 Release in Android Watch 14 CWE-922
TI-2025-15000 CVE-2025-21004 · GHSA-8xj4-3gr5-xw39

Improper signature verification in Samsung Mobile Devices

Priority LOW 26

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00093 Published 2025-07-08 Fixed in SMR Jul-2025 Release in Android Watch 14 CWE-347
TI-2025-14980 CVE-2025-20984 · GHSA-wxjj-4fcq-qrjq

Incorrect default permissions in Samsung Mobile Devices

Priority LOW 29

Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00147 Published 2025-06-04 Fixed in SMR Jun-2025 Release in Android Watch 14 CWE-276
TI-2025-14942 CVE-2025-20946 · GHSA-c8pp-hw6h-x368

Improper handling of exceptional conditions in pairing specific bluetooth devices in…

Priority MEDIUM 40

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without u…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00275 Published 2025-04-08 Fixed in SMR Apr-2025 Release in Android Watch 14
TI-2025-14941 CVE-2025-20945 · GHSA-535p-c89j-pqj5

Insecure storage of sensitive information in Samsung Mobile Devices

Priority LOW 27

Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00166 Published 2025-04-08 Fixed in SMR Apr-2025 Release in Android Watch 14 CWE-922
TI-2025-14908 CVE-2025-20912 · GHSA-w82f-ppmw-v55m

Insecure storage of sensitive information in Samsung Mobile Devices

Priority LOW 27

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00154 Published 2025-03-06 Fixed in SMR Mar-2025 Release in Android Watch 14 CWE-922
TI-2025-14906 CVE-2025-20910 · GHSA-5q3h-6jgm-m9jp

Incorrect default permissions in Samsung Mobile Devices

Priority LOW 27

Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00154 Published 2025-03-06 Fixed in SMR Mar-2025 Release in Android Watch 14 CWE-276
TI-2022-08735 CVE-2022-24930 · GHSA-p5c4-8m5x-vh8p

Improper access control in Samsung Wearable Devices

Priority LOW 21

An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Release allows untrusted applications to reset default app settings without a proper permission

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00429 Published 2022-03-08 Fixed in Firmware update Mar-2022 Release CWE-284
TI-2022-07959 CVE-2022-23997 · GHSA-gv9g-pxv2-vq9v

Improper access control in Samsung Wearable Devices

Priority LOW 19

Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a proper permission.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00438 Published 2022-02-11 Fixed in Firmware update Feb-2022 Release CWE-284
TI-2022-07958 CVE-2022-23996 · GHSA-6x8m-f958-q43m

Improper access control in Samsung Wearable Devices

Priority LOW 19

Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to enable bedtime mode without a proper permission.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00438 Published 2022-02-11 Fixed in Firmware update Feb-2022 Release CWE-284
TI-2022-07957 CVE-2022-23995 · GHSA-7mpc-29w7-wf38

Improper access control in Samsung Wearable Devices

Priority LOW 19

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00438 Published 2022-02-11 Fixed in Firmware update Feb-2022 Release CWE-284
TI-2022-07956 CVE-2022-23994 · GHSA-wrf8-w7q7-mfr4

Improper access control in Samsung Wearable Devices

Priority LOW 16

An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00449 Published 2022-02-11 Fixed in Firmware update Feb-2022 Release CWE-284