Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
22 results
Nov 4, 2026Out-of-bounds memory access in a device driver due to improper resource state tracking.CVE-2026-69050 · Computers, phones & browsers · Samsung Semiconductor · reported by a8bfbd5c-5645-475e-a8f4-6c140c17bd29
Out-of-bounds memory access in a device driver due to improper resource state tracking.
- Product
- Exynos 1480
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.com
Nov 4, 2026In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of serviceCVE-2026-69025 · Computers, phones & browsers · Samsung Semiconductor · reported by a8bfbd5c-5645-475e-a8f4-6c140c17bd29
In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service
- Product
- Exynos 1480
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.com
Nov 4, 2026Integer overflow in NPU driver parameter processing due to insufficient bounds checking.CVE-2026-69005 · Computers, phones & browsers · Samsung Semiconductor · reported by a8bfbd5c-5645-475e-a8f4-6c140c17bd29
Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
- Product
- Exynos 1480
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.com
Nov 4, 2026A double free vulnerability in NPU driver due to improper pointer management (941)CVE-2026-68994 · Computers, phones & browsers · Samsung Semiconductor · reported by a8bfbd5c-5645-475e-a8f4-6c140c17bd29
A double free vulnerability in NPU driver due to improper pointer management (941)
- Product
- Exynos 1480
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.com
Nov 4, 2026A double free vulnerability in NPU driver due to improper pointer management (940)CVE-2026-68993 · Computers, phones & browsers · Samsung Semiconductor · reported by a8bfbd5c-5645-475e-a8f4-6c140c17bd29
A double free vulnerability in NPU driver due to improper pointer management (940)
- Product
- Exynos 1480
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.com
Nov 4, 2026In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service coCVE-2026-68991 · Computers, phones & browsers · Samsung Semiconductor · reported by a8bfbd5c-5645-475e-a8f4-6c140c17bd29
In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.
- Product
- Exynos 1480
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.com
Nov 4, 2026In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of serviceCVE-2026-68990 · Computers, phones & browsers · Samsung Semiconductor · reported by a8bfbd5c-5645-475e-a8f4-6c140c17bd29
In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.
- Product
- Exynos 1480
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.com
Nov 4, 2026Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissionsCVE-2026-48183 · Computers, phones & browsers · Samsung Semiconductor · reported by a8bfbd5c-5645-475e-a8f4-6c140c17bd29
Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions
- Product
- Exynos 1480
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.com
Nov 4, 2025An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500.CVE-2025-54335 · Computers, phones & browsers · Samsung · reported by MITREMedium 6.5
An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver.
- Product
- Exynos 1480 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Jun 3, 2025An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400.CVE-2025-23107 · Computers, phones & browsers · Samsung · reported by MITREHigh 8.6
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes.
- Product
- Exynos 1480 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Jun 3, 2025An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400.CVE-2025-23103 · Computers, phones & browsers · Samsung · reported by MITREHigh 8.6
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes.
- Product
- Exynos 1480 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Jun 2, 2025An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400.CVE-2025-23099 · Computers, phones & browsers · Samsung · reported by MITRECritical 9.1
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes.
- Product
- Exynos 1480 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
May 27, 2025An issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400.CVE-2024-49196 · Computers, phones & browsers · Samsung · reported by MITREHigh 7.5
An issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type confusion leads to a Denial of Service.
- Product
- Exynos 1480 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Feb 12, 2025An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400.CVE-2024-46922 · Computers, phones & browsers · Samsung · reported by MITREHigh 7.5
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_parser_bos in the Xclipse Driver.
- Product
- Exynos 1480 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.com
Sep 10, 2024An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400.CVE-2024-31960 · Computers, phones & browsers · samsung_mobile · reported by MITREHigh 7.8
An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free.
- Product
- exynos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Sep 9, 2024An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920,CVE-2024-27365 · Computers, phones & browsers · Samsung · reported by MITREMedium 4.4
An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_blockack_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read.
- Product
- Exynos 980 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Sep 9, 2024An issue was discovered in Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos CVE-2024-27364 · Computers, phones & browsers · Samsung · reported by MITREMedium 4.4
An issue was discovered in Mobile Processor, Wearable Processor Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930. In the function slsi_rx_roamed_ind(), there is no input validation check on a length coming from userspace, which can lead to a potential heap over-read.
- Product
- Exynos 980 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Jul 9, 2024A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input valiCVE-2024-27386 · Computers, phones & browsers · samsung · reported by MITREMedium 6.7
A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input validation check on tag_len for tx coming from userspace, which can lead to heap overwrite.
- Product
- exynos_1380
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Jul 9, 2024A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input valiCVE-2024-27385 · Computers, phones & browsers · samsung · reported by MITREMedium 6.7
A vulnerability was discovered in the slsi_handle_nan_rx_event_log_ind function in Samsung Mobile Processor Exynos 1380 and Exynos 1480 related to no input validation check on tag_len for rx coming from userspace, which can lead to heap overwrite.
- Product
- exynos_1380_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Jun 13, 2024An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400.CVE-2024-31956 · Computers, phones & browsers · Samsung · reported by MITREHigh 8.4
An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks proper buffer length checking, which can result in an Out-of-Bounds Write.
- Product
- Exynos 2200 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Jun 7, 2024An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400.CVE-2024-31959 · Computers, phones & browsers · samsung · reported by MITREHigh 8.4
An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the validation of native handles, which can result in code execution.
- Product
- exynos_2200
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Jun 7, 2024An issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400.CVE-2024-31958 · Computers, phones & browsers · Samsung · reported by MITREMedium 6.8
An issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the validation of native handles, which can result in an Out-of-Bounds Write.
- Product
- Exynos 2200 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsemiconductor.samsung.comsemiconductor.samsung.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.