Samsung Android <SMR-APR-2026

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

EPSS ≥ 10%

critical

by severity

0critical4high8medium2low

updated 2026-10-26

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-48595US	—OT critical	1.71% (77th)	KEV	no fix	2026-06-01	—
CVE-2026-21009US	medium6.8	0.23% (13th)	Exploit	no fix	2026-04-13	—
CVE-2026-21008US	medium6.5	0.16% (5th)	Exploit	no fix	2026-04-13	—
CVE-2026-21007US	medium6.8	0.16% (5th)	Exploit	no fix	2026-04-13	—
CVE-2026-21003US	medium6.8	0.16% (5th)	Exploit	no fix	2026-04-13	—
CVE-2026-21011US	medium6.8	0.15% (4th)	Exploit	no fix	2026-04-13	—
CVE-2026-21006US	low2.4	0.13% (2nd)	Exploit	no fix	2026-04-13	—
CVE-2026-21010US	high7.8	0.10% (1st)	Exploit	no fix	2026-04-13	—
CVE-2026-0049US	—	0.10% (1st)	Exploit	no fix	2026-04-06	—
CVE-2026-21012US	low3.3	0.09% (1st)	Exploit	no fix	2026-04-13	—
CVE-2025-52908US	—	0.50% (42nd)	—	no fix	2026-04-07	—
CVE-2025-52909US	—	0.50% (42nd)	—	no fix	2026-04-07	—
CVE-2026-20433US	high8.8	0.34% (26th)	—	no fix	2026-04-07	—
CVE-2026-20431US	—	0.31% (23rd)	—	no fix	2026-04-07	—
CVE-2026-0080US	—	0.27% (17th)	—	no fix	2026-06-01	—
CVE-2026-0052US	—	0.25% (16th)	—	no fix	2026-06-01	—
CVE-2026-0044US	—	0.25% (16th)	—	no fix	2026-06-01	—
CVE-2026-0041US	—	0.25% (16th)	—	no fix	2026-06-01	—
CVE-2026-0040US	—	0.25% (16th)	—	no fix	2026-06-01	—
CVE-2026-0039US	—	0.25% (16th)	—	no fix	2026-06-01	—
CVE-2025-47392US	—	0.17% (5th)	—	no fix	2026-04-06	—
CVE-2026-21381US	high7.5	0.15% (4th)	—	no fix	2026-04-06	—
CVE-2026-0055US	medium6.2	0.13% (2nd)	—	no fix	2026-06-01	—
CVE-2026-0046US	medium6.2	0.12% (2nd)	—	no fix	2026-06-01	—
CVE-2026-20435US	—	0.12% (2nd)	—	no fix	2026-03-02	—
CVE-2026-0048US	medium6.8	0.12% (2nd)	—	no fix	2026-06-01	—
CVE-2026-0059US	—	0.11% (1st)	—	no fix	2026-06-01	—
CVE-2025-48616US	—	0.11% (1st)	—	no fix	2026-06-01	—
CVE-2026-0056US	—	0.11% (1st)	—	no fix	2026-06-01	—
CVE-2025-47384US	—	0.10% (1st)	—	no fix	2026-03-02	—
CVE-2026-0018US	—	0.09% (1st)	—	no fix	2026-06-01	—
CVE-2025-22424US	high7.8	0.09% (0th)	—	no fix	2026-06-01	—
CVE-2025-54602US	—	0.09% (0th)	—	no fix	2026-04-06	—
CVE-2025-22426US	—	0.08% (0th)	—	no fix	2026-06-01	—
CVE-2025-54601US	—	0.08% (0th)	—	no fix	2026-04-06	—
CVE-2026-0045US	—	0.08% (0th)	—	no fix	2026-06-01	—
CVE-2026-0016US	—	0.08% (0th)	—	no fix	2026-06-01	—
CVE-2025-48649US	—	0.08% (0th)	—	no fix	2026-06-01	—
CVE-2026-0043US	—	0.07% (0th)	—	no fix	2026-06-01	—
CVE-2026-0036US	—	0.07% (0th)	—	no fix	2026-06-01	—
CVE-2026-0079US	—	0.07% (0th)	—	no fix	2026-06-01	—
CVE-2026-0067US	—	0.07% (0th)	—	no fix	2026-06-01	—
CVE-2026-0042US	—	0.07% (0th)	—	no fix	2026-06-01	—
CVE-2026-0050US	—	0.07% (0th)	—	no fix	2026-06-01	—
CVE-2023-20713US	—	—	—	no fix	—	—
CVE-2026-0058US	—	—	—	no fix	—	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-190Integer Overflow or Wraparound10 CVEs
CWE-269Improper Privilege Management6 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-264CWE-2642 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)46 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan