Skip to content
SamsungCVE-2026-21052

Samsung SemClipboardService: path traversal

Medium6.8CVE-2026-21052 · Published Jul 10, 2026 · updated Jul 14, 2026

Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege.

Samsung advisory

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)

More Samsung advisories

All Samsung
Advisory
Samsung InputSharing: local attacker could access sharing data
Medium6.9Jul 10
Samsung Bixby: code execution
High8.5Jul 10
Samsung Health: improper authorization
Medium4.8Jul 10
Samsung Pass: improper input validation
Medium6.8Jul 10
Samsung KnoxGuardManager: improper authorization
Medium5.8Jul 10
Samsung: out-of-bounds write
High8.3Jul 10

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.