AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SamsungCVE-2026-21098

Samsung: improper access control

Samsung

CVE-2026-21098 · Published Sep 9, 2026 · updated Sep 28, 2026

Medium6.9
No fix yet
Samsung advisory

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-284

More Samsung advisories

All Samsung
Medium 5.1Sep 9Samsung Cloud Assistant: local attacker could disable enhanced data protectionCVE-2026-21106no fix yetMedium 6.9Sep 9Samsung Notes: out-of-bounds writeCVE-2026-21107no fix yetMedium 6.9Sep 9Samsung Bixby Touch: information disclosureCVE-2026-21108no fix yetLow 2.1Sep 9Samsung Watch Plugin: improper access controlCVE-2026-21109no fix yetMedium 6.9Sep 9Samsung: out-of-bounds writeCVE-2026-21110no fix yetMedium 6.9Sep 9Samsung: out-of-bounds writeCVE-2026-21111no fix yet