Samsung Mobile Smart Switch

• CVE-2026-21138 Medium 6.9 Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications. <0.1%
• CVE-2026-21137 Medium 5.1 Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege. 0.2%
• CVE-2026-21136 Medium 6.8 Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process. 0.1%
• CVE-2026-21083 Medium 6.8 Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data. 0.3%
• CVE-2026-21080 Medium 6.9 Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data. 0.2%
• CVE-2026-21079 High 7.0 Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data. <0.1%
• CVE-2026-21078 Medium 4.7 Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity. 0.2%
• CVE-2026-21005 High 7.1 Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege. 0.2%
• CVE-2026-21004 Medium 6.9 Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service. 0.2%
• CVE-2026-20999 High 7.1 Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions. 0.3%
• CVE-2026-20998 High 7.1 Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication. 0.6%
• CVE-2026-20997 Medium 5.3 Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication. 0.3%
• CVE-2026-20996 High 7.1 Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication. 0.2%
• CVE-2026-20995 Medium 5.3 Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration. 0.3%
• CVE-2025-21078 High 8.8 Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications. 0.2%
• CVE-2025-21064 High 8.8 Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data. 0.3%
• CVE-2025-21062 High 7.8 Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this 0.1%
• CVE-2025-21061 High 7.1 Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability. 0.1%
• CVE-2025-21060 Medium 5.5 Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vu 0.1%
• CVE-2025-20996 Medium 5.0 Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required f 0.1%