AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SamsungCVE-2026-21105

Samsung Collection: improper access control

Samsung

CVE-2026-21105 · Published Sep 9, 2026 · updated Sep 23, 2026

Medium5.9
No fix yet
Samsung advisory

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-284

More Samsung advisories

All Samsung
Medium 5.1Sep 9Samsung Cloud Assistant: local attacker could disable enhanced data protectionCVE-2026-21106no fix yetMedium 6.9Sep 9Samsung Notes: out-of-bounds writeCVE-2026-21107no fix yetMedium 6.9Sep 9Samsung Bixby Touch: information disclosureCVE-2026-21108no fix yetLow 2.1Sep 9Samsung Watch Plugin: improper access controlCVE-2026-21109no fix yetMedium 6.9Sep 9Samsung: out-of-bounds writeCVE-2026-21110no fix yetMedium 6.9Sep 9Samsung: out-of-bounds writeCVE-2026-21111no fix yet