CVE-2026-21058
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete files with Samsung Contacts' privilege.
Risk Assessment
A local attacker could exploit this to delete files accessible to Samsung Contacts, potentially leading to data loss or disruption.
Recommendation
Update Samsung Contacts to the latest version that includes the SMR Aug-2026 Release 1 fix.
Other vulnerabilities in Samsung Contacts
See all- CVE-2026-21060Medium
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
- CVE-2026-21059High
Improper export of application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete files with Samsung Contacts' privilege.
Original NVD description (English source)
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.