CVE-2026-21019

HighCVSS 8.6

Published: 13/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege.

Risk Assessment

Local attackers can exploit this vulnerability to gain full control over the device, posing a serious threat to user data security.

Recommendation

It is recommended to update Galaxy Watch to the latest software version to mitigate this vulnerability.

Other vulnerabilities in Galaxy Watch

CVE-2025-21045Medium
Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information.

Original NVD description (English source)

Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS