CVE-2026-87658 - Google Chrome Extensions Cross-Origin Information Disclosure
CVE ID :CVE-2026-87658
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87658
Published : Sept. 9, 2026, 1:17 a.m. | 18 minutes ago
Description :Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21095 - libimagecodec Heap-Based Buffer Overflow
CVE ID :CVE-2026-21095
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21095
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21096 - libimagecodec Heap-Based Buffer Overflow
CVE ID :CVE-2026-21096
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21096
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
Severity: 9.2 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21097 - Samsung ActivityTaskManagerService Improper Authentication Vulnerability
CVE ID :CVE-2026-21097
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
Severity: 4.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21097
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
Severity: 4.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21098 - Link to Windows Improper Access Control Vulnerability
CVE ID :CVE-2026-21098
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21098
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21099 - SettingsProvider Improper Access Control Vulnerability
CVE ID :CVE-2026-21099
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21099
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21100 - SystemUI Improper Access Control Vulnerability
CVE ID :CVE-2026-21100
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21100
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21101 - DualDAR Driver Improper Input Validation Privilege Escalation
CVE ID :CVE-2026-21101
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21101
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21102 - DualDAR Use-After-Free Vulnerability
CVE ID :CVE-2026-21102
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21102
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21103 - GalaxyDiagnostics Path Traversal Vulnerability
CVE ID :CVE-2026-21103
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21103
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21104 - Samsung KnoxVault Heap-Based Buffer Overflow
CVE ID :CVE-2026-21104
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21104
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21105 - Android Collection Improper Access Control Vulnerability
CVE ID :CVE-2026-21105
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21105
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21106 - Samsung Cloud Assistant Improper Intent Verification Vulnerability
CVE ID :CVE-2026-21106
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21106
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21107 - Samsung Notes Out-of-Bounds Write
CVE ID :CVE-2026-21107
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21107
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21108 - Bixby Touch Improper Component Export Vulnerability
CVE ID :CVE-2026-21108
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21108
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21109 - Watch Plugin Improper Access Control Vulnerability
CVE ID :CVE-2026-21109
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
Severity: 2.1 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21109
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
Severity: 2.1 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21110 - Samsung One UI Out-of-Bounds Write
CVE ID :CVE-2026-21110
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21110
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21111 - Samsung libsthmbc Out-of-Bounds Write
CVE ID :CVE-2026-21111
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21111
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21112 - Samsung Tips Arbitrary Activity Launch Vulnerability
CVE ID :CVE-2026-21112
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21112
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21113 - Visual Voicemail Improper Component Export Vulnerability
CVE ID :CVE-2026-21113
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21113
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87732 - Mirage-crypto Information Disclosure Vulnerability
CVE ID :CVE-2026-87732
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false, but the destination buffer already holds the full plaintext.
Severity: 6.2 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87732
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false, but the destination buffer already holds the full plaintext.
Severity: 6.2 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...