Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2663▼ 380 respecto a la semana anterior

Críticas / altas1289▼ 36 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior

16 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-21019	Pendiente de análisis	Alta (8.6)	0.16%	—	Samsung Galaxy Watch^AI	13/5/2026	17/6/2026	Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege.
CVE-2025-21023	Aplazada	Baja (3.3)	0.12%	—	Samsung Galaxy Watch^AI Google Android Watch^AI	6/8/2025	17/6/2026	Improper access control in WcsExtension for Galaxy Watch prior to Android Watch 16 allows local attackers to access sensitive information.
CVE-2025-21013	Aplazada	Media (6.2)	0.14%	—	Samsung Galaxy Watch^AI	6/8/2025	17/6/2026	Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to outdoor exercise and sleep time.
CVE-2025-21012	Aplazada	Media (5.5)	0.12%	—	Samsung Galaxy Watch^AI	6/8/2025	17/6/2026	Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to modify fall detection configuration.
CVE-2025-21011	Aplazada	Media (5.5)	0.13%	—	Samsung Galaxy Watch^AI	6/8/2025	17/6/2026	Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to motion and body sensors.
CVE-2024-49412	Aplazada	Media (5.5)	0.15%	—	Samsung Galaxy Watch^AI	3/12/2024	17/6/2026	Improper input validation in Settings prior to SMR Dec-2024 Release 1 allows local attackers to broadcast signal for discovering Bluetooth on Galaxy Watch.
CVE-2022-36875	Modificada	Media (5.5)	0.20%	—	Samsung Galaxy Watch Plugin	9/9/2022	17/6/2026	Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission.
CVE-2022-36874	Modificada	Media (6.2)	0.20%	—	Samsung Galaxy Watch Plugin	9/9/2022	17/6/2026	Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.
CVE-2022-36873	Modificada	Media (6.5)	0.23%	—	Samsung Galaxy Watch Plugin	9/9/2022	17/6/2026	Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device.
CVE-2022-25830	Modificada	Baja (3.3)	0.21%	—	Samsung Galaxy Watch 3 Plugin	10/3/2022	17/6/2026	Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access password information of connected WiFiAp in the log
CVE-2022-25827	Modificada	Baja (3.3)	0.21%	—	Samsung Galaxy Watch Plugin	10/3/2022	17/6/2026	Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the log
CVE-2022-25826	Modificada	Baja (3.3)	0.21%	—	Samsung Galaxy Watch 3 Plugin	10/3/2022	17/6/2026	Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log
CVE-2022-25823	Modificada	Baja (3.3)	0.21%	—	Samsung Galaxy Watch Plugin	10/3/2022	17/6/2026	Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in log.
CVE-2021-25424	Modificada	Alta (8.8)	0.44%	—	Samsung Galaxy Watch Active 2 Firmware Samsung Galaxy Watch Active Firmware Samsung Galaxy Watch Firmware Samsung Galaxy Watch 3 Firmware+5	11/6/2021	17/6/2026	Improper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021 Release allows bluetooth attacker to take over the user's bluetooth device without user awareness.
CVE-2021-25421	Modificada	Media (5.5)	0.24%	—	Samsung Galaxy Watch 3 Plugin	11/6/2021	17/6/2026	Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.
CVE-2021-25420	Modificada	Media (5.5)	0.24%	—	Samsung Galaxy Watch Plugin	11/6/2021	17/6/2026	Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.