Search vulnerabilities

Results 65

Export CSV
CVE-2026-21107

Local Out-of-Bounds Write in Samsung Notes Allows Memory Corruption

Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Products
CVE-2025-21076

Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2025-21057

Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2025-21067

Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2025-21070

Out-of-bounds write in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to write out-of-bounds memory.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2025-21068

Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2025-21069

Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2025-21066

Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2025-21036

Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for triggering this vulnerability.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2025-21037

Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2025-20950

Use of implicit intent for sensitive communication in SamsungNotes prior to version 4.4.26.45 allows local attackers to access sensitive information.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2024-20868

Improper input validation in Samsung Notes prior to version 4.4.15 allows local attackers to delete files with Samsung Notes privilege under certain conditions.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2025-20977

Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Products
CVE-2025-20930

Out-of-bounds read in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products