Samsung Wear OS vulnerabilities

19 CVEs affecting Samsung Wear OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-21045, published 2025-10-10.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-23994, published 2022-02-11. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper…
• CVE-2022-23997, published 2022-02-11. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a…
• CVE-2022-23996, published 2022-02-11. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to enable bedtime mode without a proper permission.
• CVE-2022-23995, published 2022-02-11. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper…
• CVE-2022-24930, published 2022-03-10. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Release allows untrusted applications to reset default app settings without a proper…
• CVE-2025-20946, published 2025-04-08. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific…
• CVE-2025-20956, published 2025-05-07. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows physical attackers to access developer settings.
• CVE-2025-20939, published 2025-04-08. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices.
• CVE-2025-20945, published 2025-04-08. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch.
• CVE-2025-20912, published 2025-03-06. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch.

Latest

• CVE-2025-21045, published 2025-10-10. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.
• CVE-2025-21004, published 2025-07-08. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device.
• CVE-2025-20998, published 2025-07-08. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.
• CVE-2025-20997, published 2025-07-08. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch.
• CVE-2025-20986, published 2025-06-04. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots.
• CVE-2025-20984, published 2025-06-04. Medium severity, CVSS 6.2. EPSS: 0.1% chance of exploitation in the next 30 days. Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch.