CVE-2026-21112

5.1 mediumEPSS 0.1%

Medium (5.1) in samsung android. EPSS 0.1% chance of exploitation in the next 30 days.

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2026-09-09
Modified: 2026-09-23
Record from: the NVD, synced 2026-10-19

Affected

samsung:android

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=09

Check your stack JSON