Samsung Galaxy Wearable vulnerabilities

3 CVEs affecting Samsung Galaxy Wearable, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21013, published 2026-04-13.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-36838, published 2022-08-05. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive information.
• CVE-2025-21022, published 2025-08-06. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information.
• CVE-2026-21013, published 2026-04-13. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.