CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,250 CVEs published, 240 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,250
Show in the list
Critical, last 7 days
240
Show in the list
Healthcare-tagged, last 7 days
6
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product samsung:smart_switch. Show all products

Free: a daily email for up to 3 products and the weekly digest. No card, no password. By continuing you agree to the Terms and Privacy Policy.

16 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-21083Medium 6.8Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
Assigned by SamsungMobile
Aug 10, 2026
CVE-2026-21080Medium 6.9Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
Assigned by SamsungMobile
Aug 10, 2026
CVE-2026-21079High 7.0Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
Assigned by SamsungMobile
Aug 10, 2026
CVE-2026-21078Medium 4.7Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.
Assigned by SamsungMobile
Aug 10, 2026
CVE-2026-21005High 7.1Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.
Assigned by SamsungMobile
Mar 16, 2026
CVE-2026-21004Medium 6.9Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.
Assigned by SamsungMobile
Mar 16, 2026
CVE-2026-20999High 7.1Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions.
Assigned by SamsungMobile
Mar 16, 2026
CVE-2026-20998High 7.1Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.
Assigned by SamsungMobile
Mar 16, 2026
CVE-2026-20997Medium 5.3Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.
Assigned by SamsungMobile
Mar 16, 2026
CVE-2026-20996High 7.1Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication.
Assigned by SamsungMobile
Mar 16, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Essential cookies only, unless you allow a Google ads cookie. See our .