SamsungCVE-2026-21053
Samsung Email: improper input validation
Medium5.1CVE-2026-21053 · Published Jul 10, 2026
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
- CVSS 4.0
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity from
- the vendor (its own CVE record or advisory)
More Samsung advisories
All Samsung| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jul 10 | Samsung InputSharing: local attacker could access sharing data | Medium6.9 | No fix yet |
| Jul 10 | Samsung Bixby: code execution | High8.5 | No fix yet |
| Jul 10 | Samsung Health: improper authorization | Medium4.8 | No fix yet |
| Jul 10 | Samsung Pass: improper input validation | Medium6.8 | No fix yet |
| Jul 10 | Samsung KnoxGuardManager: improper authorization | Medium5.8 | No fix yet |
| Jul 10 | Samsung: out-of-bounds write | High8.3 | No fix yet |