Samsung Mobile Samsung Checkout vulnerabilities

3 CVEs affecting Samsung Mobile Samsung Checkout, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21130, published 2026-10-12.

More from Samsung Mobile.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-21128, published 2026-10-12. Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.
• CVE-2026-21130, published 2026-10-12. Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.
• CVE-2026-21129, published 2026-10-12. Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.