AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SamsungCVE-2026-21106

Samsung Cloud Assistant: local attacker could disable enhanced data protection

Samsung

CVE-2026-21106 · Published Sep 9, 2026 · updated Sep 10, 2026

Medium5.1
No fix yet
Samsung advisory

Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-925

More Samsung advisories

All Samsung
Medium 6.9Sep 9Samsung Notes: out-of-bounds writeCVE-2026-21107no fix yetMedium 6.9Sep 9Samsung Bixby Touch: information disclosureCVE-2026-21108no fix yetLow 2.1Sep 9Samsung Watch Plugin: improper access controlCVE-2026-21109no fix yetMedium 6.9Sep 9Samsung: out-of-bounds writeCVE-2026-21110no fix yetMedium 6.9Sep 9Samsung: out-of-bounds writeCVE-2026-21111no fix yetMedium 5.1Sep 9Samsung Tips: improper input validationCVE-2026-21112no fix yet