CVE-2026-87655 - Google Chrome UI Redressing Vulnerability
CVE ID :CVE-2026-87655
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87655
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87656 - Google Chrome Safebrowsing Improper State Validation
CVE ID :CVE-2026-87656
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87656
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87657 - Google Chrome V8 Use-After-Free Vulnerability
CVE ID :CVE-2026-87657
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87657
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87658 - Google Chrome Extensions Cross-Origin Information Disclosure
CVE ID :CVE-2026-87658
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87658
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21095 - libimagecodec Heap-Based Buffer Overflow
CVE ID :CVE-2026-21095
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21095
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21096 - libimagecodec Heap-Based Buffer Overflow
CVE ID :CVE-2026-21096
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21096
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21097 - Samsung ActivityTaskManagerService Improper Authentication Vulnerability
CVE ID :CVE-2026-21097
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
Severity: 4.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21097
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
Severity: 4.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21098 - Link to Windows Improper Access Control Vulnerability
CVE ID :CVE-2026-21098
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21098
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21099 - SettingsProvider Improper Access Control Vulnerability
CVE ID :CVE-2026-21099
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21099
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21100 - SystemUI Improper Access Control Vulnerability
CVE ID :CVE-2026-21100
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21100
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21101 - DualDAR Driver Improper Input Validation Privilege Escalation
CVE ID :CVE-2026-21101
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21101
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21102 - DualDAR Use-After-Free Vulnerability
CVE ID :CVE-2026-21102
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21102
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21103 - GalaxyDiagnostics Path Traversal Vulnerability
CVE ID :CVE-2026-21103
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21103
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21104 - Samsung KnoxVault Heap-Based Buffer Overflow
CVE ID :CVE-2026-21104
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21104
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21105 - Android Collection Improper Access Control Vulnerability
CVE ID :CVE-2026-21105
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21105
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21106 - Samsung Cloud Assistant Improper Intent Verification Vulnerability
CVE ID :CVE-2026-21106
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21106
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21107 - Samsung Notes Out-of-Bounds Write
CVE ID :CVE-2026-21107
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21107
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21108 - Bixby Touch Improper Component Export Vulnerability
CVE ID :CVE-2026-21108
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21108
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21109 - Watch Plugin Improper Access Control Vulnerability
CVE ID :CVE-2026-21109
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
Severity: 2.1 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21109
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
Severity: 2.1 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21110 - Samsung One UI Out-of-Bounds Write
CVE ID :CVE-2026-21110
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21110
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21111 - Samsung libsthmbc Out-of-Bounds Write
CVE ID :CVE-2026-21111
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21111
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...