Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 10 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,638All CVEsplus 19,141 rejected
- 668Last 24 hours2,951 in the last 7 days
- 17,123Last 30 days1,606 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 36 | 131 | 4 | 0 | 174 | 655 |
| 2025 | 0 | 29 | 198 | 7 | 0 | 234 | 481 |
| 2024 | 0 | 35 | 171 | 15 | 0 | 221 | 247 |
| 2023 | 0 | 9 | 15 | 2 | 0 | 26 | 26 |
| Title | ||
|---|---|---|
| CVE-2026-21157 | Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.Samsung Mobile · Bixby | High8.3 |
| CVE-2026-21139 | Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile…Samsung Mobile · Samsung Continuity Service for windows | High7.3 |
| CVE-2026-21138 | Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.Samsung Mobile · Smart Switch | Medium6.9 |
| CVE-2026-21137 | Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.Samsung Mobile · Smart Switch | Medium5.1 |
| CVE-2026-21136 | Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.Samsung Mobile · Smart Switch | Medium6.8 |
| CVE-2026-21135 | Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.Samsung Mobile · Samsung Internet | Medium5.9 |
| CVE-2026-21134 | Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.Samsung Mobile · Samsung Flow | Medium6.1 |
| CVE-2026-21133 | Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.Samsung Mobile · Samsung Flow | Medium5.1 |
| CVE-2026-21132 | Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for…Samsung Mobile · Samsung Internet | Medium6.0 |
| CVE-2026-21131 | Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on…Samsung Mobile · Samsung Flow | Low2.1 |
| CVE-2026-21130 | Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity…Samsung Mobile · Samsung Checkout | Medium5.1 |
| CVE-2026-21129 | Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary…Samsung Mobile · Samsung Checkout | Medium5.1 |
| CVE-2026-21128 | Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with…Samsung Mobile · Samsung Checkout | Medium5.1 |
| CVE-2026-21127 | Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.Samsung Mobile · Samsung Account | Medium6.9 |
| CVE-2026-21126 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write…Samsung Mobile · Samsung Mobile Devices | Medium6.9 |
| CVE-2026-21125 | Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute…Samsung Mobile · Samsung Mobile Devices | High8.6 |
| CVE-2026-21124 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially…Samsung Mobile · Samsung Mobile Devices | High8.6 |
| CVE-2026-21123 | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied…Samsung Mobile · Samsung Mobile Devices | Medium6.7 |
| CVE-2026-21122 | Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.Samsung Mobile · Samsung Mobile Devices | High7.0 |
| CVE-2026-21121 | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.Samsung Mobile · Samsung Mobile Devices | Medium6.9 |
| CVE-2026-21120 | Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.Samsung Mobile · Samsung Mobile Devices | High8.9 |
| CVE-2026-21119 | Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.Samsung Mobile · Samsung Mobile Devices | Medium4.8 |
| CVE-2026-21118 | Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.Samsung Mobile · Samsung Mobile Devices | Medium6.9 |
| CVE-2026-21117 | Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.Samsung Mobile · Samsung Mobile Devices | Medium5.1 |
| CVE-2026-21116 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.Samsung Mobile · Samsung Mobile Devices | Medium5.1 |
| CVE-2026-21115 | Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.Samsung Mobile · Samsung Mobile Devices | Medium5.1 |
| CVE-2026-21114 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.Samsung Mobile · Samsung Mobile Devices | High7.0 |
| CVE-2026-21140 | Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications.Samsung Mobile · Samsung Mobile Devices | Medium6.9 |
| CVE-2026-21113 | Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper…Samsung Mobile · Visual Voicemail | Medium4.8 |
| CVE-2026-21112 | Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction…Samsung Mobile · Samsung Tips | Medium5.1 |
| CVE-2026-21111 | Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.Samsung Mobile · libsthmbc | Medium6.9 |
| CVE-2026-21110 | Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.Samsung Mobile · libsavscmn.so | Medium6.9 |
| CVE-2026-21109 | Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.Samsung Mobile · Watch Plugin | Low2.1 |
| CVE-2026-21108 | Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.Samsung Mobile · Bixby Touch | Medium6.9 |
| CVE-2026-21107 | Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.Samsung Mobile · Samsung Notes | Medium6.9 |
| CVE-2026-21106 | Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data…Samsung Mobile · Samsung Cloud Assistant | Medium5.1 |
| CVE-2026-21105 | Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.Samsung Mobile · Collection | Medium5.9 |
| CVE-2026-21104 | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code.Samsung Mobile · Samsung Mobile Devices | High7.1 |
| CVE-2026-21103 | Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.Samsung Mobile · Samsung Mobile Devices | Medium6.8 |
| CVE-2026-21102 | Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.Samsung Mobile · Samsung Mobile Devices | Critical9.3 |
| CVE-2026-21101 | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root…Samsung Mobile · Samsung Mobile Devices | High8.4 |
| CVE-2026-21100 | Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.Samsung Mobile · Samsung Mobile Devices | Medium6.9 |
| CVE-2026-21099 | Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.Samsung Mobile · Samsung Mobile Devices | Medium5.1 |
| CVE-2026-21098 | Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user…Samsung Mobile · Samsung Mobile Devices | Medium6.9 |
| CVE-2026-21097 | Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.Samsung Mobile · Samsung Mobile Devices | Medium4.6 |
| CVE-2026-21096 | Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.Samsung Mobile · Samsung Mobile Devices | Critical9.2 |
| CVE-2026-21095 | Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.Samsung Mobile · Samsung Mobile Devices | Critical9.2 |
| CVE-2026-21094 | Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.Samsung Mobile · Samsung Mobile Devices | Medium6.1 |
| CVE-2026-21093 | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.Samsung Mobile · Samsung Mobile Devices | Medium5.6 |
| CVE-2026-21092 | Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.Samsung Mobile · Samsung Mobile Devices | High8.8 |