Sign in

5.1 Medium

CVE-2026-20984 Improper handling of insufficient permission in Galaxy Wearable installed on non-Samsung Device prior to version…

Description

Improper handling of insufficient permission in Galaxy Wearable installed on non-Samsung Device prior to version 2.2.68 allows local attackers to access sensitive information.

Affected products and versions

Product	Affected versions	Fixed in
Galaxy Wearable 2.2	earliest → < 2.2.68	2.2.68

The 5 CVEs of Galaxy Wearable →

CVE-2026-21013 Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive… 6.9 Medium CVE-2025-21022 Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive… 3.3 Low CVE-2025-20923 Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary… 4.0 Medium CVE-2022-36838 Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive… 4.0 Medium

Do you use Galaxy Wearable?

Track this CVE Watch Galaxy Wearable Check my SBOMs

www.cveye.io/en/cve/CVE-2026-20984

Timeline

Published February 4, 2026
Last modified February 4, 2026

References

security.samsungmobile.com security.samsungmobile.com

Track this CVE