CVE-2026-21098 - Link to Windows Improper Access Control Vulnerability
CVE ID :CVE-2026-21098
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21098
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21099 - SettingsProvider Improper Access Control Vulnerability
CVE ID :CVE-2026-21099
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21099
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21100 - SystemUI Improper Access Control Vulnerability
CVE ID :CVE-2026-21100
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21100
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21101 - DualDAR Driver Improper Input Validation Privilege Escalation
CVE ID :CVE-2026-21101
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21101
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege.
Severity: 8.4 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21102 - DualDAR Use-After-Free Vulnerability
CVE ID :CVE-2026-21102
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21102
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21103 - GalaxyDiagnostics Path Traversal Vulnerability
CVE ID :CVE-2026-21103
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21103
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21104 - Samsung KnoxVault Heap-Based Buffer Overflow
CVE ID :CVE-2026-21104
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21104
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21105 - Android Collection Improper Access Control Vulnerability
CVE ID :CVE-2026-21105
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21105
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.
Severity: 5.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21106 - Samsung Cloud Assistant Improper Intent Verification Vulnerability
CVE ID :CVE-2026-21106
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21106
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21107 - Samsung Notes Out-of-Bounds Write
CVE ID :CVE-2026-21107
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21107
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21108 - Bixby Touch Improper Component Export Vulnerability
CVE ID :CVE-2026-21108
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21108
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21109 - Watch Plugin Improper Access Control Vulnerability
CVE ID :CVE-2026-21109
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
Severity: 2.1 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21109
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
Severity: 2.1 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21110 - Samsung One UI Out-of-Bounds Write
CVE ID :CVE-2026-21110
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21110
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21111 - Samsung libsthmbc Out-of-Bounds Write
CVE ID :CVE-2026-21111
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21111
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
Severity: 6.9 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21112 - Samsung Tips Arbitrary Activity Launch Vulnerability
CVE ID :CVE-2026-21112
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21112
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.
Severity: 5.1 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-21113 - Visual Voicemail Improper Component Export Vulnerability
CVE ID :CVE-2026-21113
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-21113
Published : Sept. 9, 2026, 5:17 a.m. | 18 minutes ago
Description :Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission.
Severity: 4.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87732 - Mirage-crypto Information Disclosure Vulnerability
CVE ID :CVE-2026-87732
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false, but the destination buffer already holds the full plaintext.
Severity: 6.2 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87732
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false, but the destination buffer already holds the full plaintext.
Severity: 6.2 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87733 - Mirage-crypto-ec ECDSA Signature Forgery Vulnerability
CVE ID :CVE-2026-87733
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key.
Severity: 6.2 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87733
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key.
Severity: 6.2 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87734 - utcp OCaml Denial of Service Vulnerability
CVE ID :CVE-2026-87734
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87734
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87735 - Mirage-crypto-pk RSA Encryption and Decryption Information Disclosure
CVE ID :CVE-2026-87735
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87735
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-87736 - mirage-crypto-ec Out-of-Bounds Read
CVE ID :CVE-2026-87736
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-87736
Published : Sept. 9, 2026, 5:18 a.m. | 17 minutes ago
Description :An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...