Approved changes feed: RSS · Atom

cpe:2.3:a:samsung_mobile:samsung_flow:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSamsung Mobile (e4aff327-fe3a-5b2e-8533-0cd1b76763b9)
ProductSamsung Flow (0233ee49-0962-5fdd-b74e-63af1b1b563b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21133 not_vulnerable 2026-11-03 10:17:56.576636 Details available
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
Published: 2026-10-12T04:57:51.437Z
Updated: 2026-10-16T16:17:55.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21134 not_vulnerable 2026-11-03 10:17:55.009346 Details available
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
Published: 2026-10-12T04:57:52.541Z
Updated: 2026-10-16T16:19:33.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20972 not_vulnerable 2026-06-08 07:08:50.449459 Details available
MEDIUM (6.2)
Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration.
Published: 2025-05-07T08:24:28.604Z
Updated: 2025-05-07T15:18:20.431Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20971 not_vulnerable 2026-06-08 07:08:50.444513 Details available
MEDIUM (5.5)
Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow.
Published: 2025-05-07T08:24:27.100Z
Updated: 2025-05-07T15:31:50.079Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49407 not_vulnerable 2026-06-08 06:50:13.911290 Details available
MEDIUM (4.6)
Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles.
Published: 2024-11-06T02:17:25.616Z
Updated: 2024-11-06T11:12:42.602Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34600 not_vulnerable 2026-06-08 06:37:33.815685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28775 vulnerable 2026-06-08 05:42:45.787699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28543 vulnerable 2026-06-08 05:42:44.592878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25509 vulnerable 2026-06-08 05:30:41.106721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25507 vulnerable 2026-06-08 05:30:41.103868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.