CVE Catalog

CVE-2026-21077

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.11%

1th percentile - higher than 1% of all known CVEs

Summary

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.

Risk Assessment

A local attacker could access confidential health data, potentially compromising user privacy.

Recommendation

Update Samsung Health to the latest version that includes the fix.

Original NVD description (English source)

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS