CVE-2026-21060

MediumCVSS 4.6

Published: 10/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.

An attacker with physical access could obtain contact data from multiple user profiles, violating data isolation between profiles.

Install SMR Aug-2026 Release 1 or later to fix input validation in Samsung Contacts.

Original NVD description (English source)

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.