CVE-2026-21127
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
Risk Assessment
A local attacker can access sensitive data stored by Samsung Account, potentially leading to privacy breach or identity theft.
Recommendation
Update Samsung Account to version 15.7.01.1 or later. Restrict local access to the device.
Other vulnerabilities in Samsung Account
See all- CVE-2025-58486Medium
Improper input validation in Samsung Account prior to version 15.5.01.1 allows a local attacker to execute arbitrary script.
- CVE-2025-21076Medium
Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.
Original NVD description (English source)
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS