SamsungCVE-2026-21106
Samsung Cloud Assistant: local attacker could disable enhanced data protection
Medium5.1CVE-2026-21106 · Published Sep 9, 2026 · updated Sep 10, 2026
Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
- CVSS 4.0
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-925
More Samsung advisories
All Samsung| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 9 | Samsung Notes: out-of-bounds write | Medium6.9 | No fix yet |
| Sep 9 | Samsung Bixby Touch: information disclosure | Medium6.9 | No fix yet |
| Sep 9 | Samsung Watch Plugin: improper access control | Low2.1 | No fix yet |
| Sep 9 | Samsung: out-of-bounds write | Medium6.9 | No fix yet |
| Sep 9 | Samsung: out-of-bounds write | Medium6.9 | No fix yet |
| Sep 9 | Samsung Tips: improper input validation | Medium5.1 | No fix yet |