CVE-2026-21059
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Improper export of application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete files with Samsung Contacts' privilege.
Risk Assessment
A local attacker could delete files accessible to Samsung Contacts, potentially leading to data loss or system integrity compromise.
Recommendation
Update Samsung Contacts to the latest version that includes the SMR Aug-2026 Release 1 fix.
Other vulnerabilities in Samsung Contacts
See all- CVE-2026-21060Medium
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
- CVE-2026-21058High
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete files with Samsung Contacts' privilege.
Original NVD description (English source)
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.