EUVD-2026-42826
GHSA-2qcr-4rxg-q25w
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local-only access with low privileges required; impact is limited to low confidentiality of connected device data with no integrity or availability consequence.
Primary rating from Vendor (samsung).
CVSS VectorVendor: samsung
Lifecycle Timeline
1DescriptionCVE.org
Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
AnalysisAI
Improper authorization in Samsung Health prior to version 7.00.0.107 exposes connected device information to local, low-privileged attackers on the same Android device. The flaw likely involves an improperly protected Android IPC mechanism - such as a content provider or broadcast receiver - that fails to enforce access controls over paired wearable or peripheral device data. No public exploit code exists and this vulnerability has not been added to the CISA KEV catalog; combined with the local-only attack vector and limited data sensitivity, real-world risk is low.
Technical ContextAI
Samsung Health is a mobile health and fitness application bundled with Samsung Android devices, integrating with wearables such as Galaxy Watch and Galaxy Buds via Bluetooth. The improper authorization weakness - though no CWE identifier was assigned - is consistent with Android application-layer access control failures, commonly involving unprotected or world-readable content providers, exported activities, or implicit broadcast receivers that expose internal app data. The CVSS 4.0 vector (AV:L/PR:L) confirms the vulnerability is exploitable only from the local device context by a low-privileged process or application. The 'connected device information' at risk likely includes Bluetooth device identifiers, pairing metadata, or wearable health sensor linkage data.
RemediationAI
Update Samsung Health to version 7.00.0.107 or later, available via the Galaxy Store or Google Play Store on affected Samsung Android devices. This patch was confirmed as the fix version by EUVD-2026-42826. The Samsung Mobile Security advisory at https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=07 provides additional detail. As a compensating control prior to patching, restricting installation of untrusted third-party applications reduces the pool of potential local attackers capable of exploiting the exposed interface, though this does not eliminate the vulnerability. Revoking unnecessary app permissions for sideloaded or unverified applications is a low-risk mitigation with no functional trade-offs for Samsung Health itself.
Arbitrary file write as SYSTEM in Samsung MagicINFO 9 Server before version 21.1050 allows remote attackers to place att
Samsung MagicINFO 9 Server contains a path traversal vulnerability allowing unauthenticated attackers to write arbitrary
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_u
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an un
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive informat
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today