samsung galaxy store

Name: samsung galaxy store
Brand: samsung

productUS

cpe:2.3:a:samsung:galaxy_store:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

2critical10high18medium1low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-21001US	medium5.5	0.12% (2nd)	Exploit	4.6.03.8	2026-03-16	< 4.6.03.8
CVE-2026-21002US	medium5.5	0.07% (0th)	Exploit	4.6.03.8	2026-03-16	< 4.6.03.8
CVE-2023-21434US	medium6.1	12.9% (96th)	—	4.5.49.8	2023-02-09	< 4.5.49.8
CVE-2023-21433US	high7.8OT elevated	3.67% (90th)	—	4.5.49.8	2023-02-09	< 4.5.49.8
CVE-2023-42581US	high7.5OT elevated	1.17% (67th)	—	4.5.64.4	2023-12-05	< 4.5.64.4
CVE-2023-42580US	critical9.8OT elevated	0.97% (62nd)	—	4.5.64.4	2023-12-05	< 4.5.64.4
CVE-2022-22288US	high7.5	0.92% (60th)	—	4.5.36.5	2022-01-10	< 4.5.36.5
CVE-2022-28544US	medium5.5	0.90% (60th)	—	4.5.40.5	2022-04-11	< 4.5.40.5
CVE-2023-21516US	critical9.6	0.55% (46th)	—	4.5.49.8	2023-05-26	< 4.5.49.8
CVE-2023-21515US	high8.8	0.52% (44th)	—	4.5.49.8	2023-05-26	< 4.5.49.8
CVE-2023-21514US	high8.8	0.52% (44th)	—	4.5.49.8	2023-05-26	< 4.5.49.8
CVE-2022-28776US	high7.8OT elevated	0.27% (19th)	—	4.5.36.4	2022-04-11	< 4.5.36.4
CVE-2022-28542US	medium5.5OT elevated	0.27% (19th)	—	4.5.40.5	2022-04-11	< 4.5.40.5
CVE-2022-28791US	medium5.5	0.22% (12th)	—	4.5.41.8	2022-05-03	< 4.5.41.8
CVE-2021-25499US	medium5.5	0.22% (12th)	—	4.5.32.4	2021-10-06	< 4.5.32.4
CVE-2022-33710US	high7.8	0.21% (12th)	—	4.5.41.8	2022-07-12	< 4.5.41.8
CVE-2022-33709US	high7.8	0.21% (12th)	—	4.5.41.8	2022-07-12	< 4.5.41.8
CVE-2022-33708US	high7.8	0.21% (12th)	—	4.5.41.8	2022-07-12	< 4.5.41.8
CVE-2025-20895US	medium4.6	0.20% (10th)	—	4.5.87.6	2025-02-04	< 4.5.87.6
CVE-2024-20825US	medium5.5	0.17% (6th)	—	4.5.63.6	2024-02-06	< 4.5.63.6
CVE-2024-20824US	medium5.5	0.17% (6th)	—	4.5.63.6	2024-02-06	< 4.5.63.6
CVE-2024-20823US	medium5.5	0.17% (6th)	—	4.5.63.6	2024-02-06	< 4.5.63.6
CVE-2024-20822US	medium5.5	0.17% (6th)	—	4.5.63.6	2024-02-06	< 4.5.63.6
CVE-2026-20976US	high7.8	0.16% (5th)	—	4.6.02.0	2026-01-09	< 4.6.02.0
CVE-2023-30705US	medium5.5OT elevated	0.15% (4th)	—	4.5.56.6	2023-08-10	< 4.5.56.6
CVE-2024-20870US	medium5.5	0.14% (4th)	—	4.5.71.8	2024-05-07	< 4.5.71.8
CVE-2025-20951US	medium5.5	0.14% (3rd)	—	4.5.90.7	2025-04-08	< 4.5.90.7
CVE-2026-21000US	medium5.5	0.14% (3rd)	—	4.6.03.8	2026-03-16	< 4.6.03.8
CVE-2024-34601US	medium5.3	0.13% (2nd)	—	4.5.81.0	2024-07-02	< 4.5.81.0
CVE-2023-21483US	medium5.5	0.10% (1st)	—	4.5.53.6	2025-09-03	< 4.5.53.6
CVE-2025-58483US	low3.3	0.10% (1st)	—	1.0.06.29	2025-12-02	< 1.0.06.29

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-285Improper Authorization4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan