Sign in

6.9 Medium

CVE-2026-21100 Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity

Description

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.

Affected products and versions

Product	Affected versions	Fixed in
Samsung Mobile Devices	Versions not published

The 866 CVEs of Samsung Mobile Devices →

CVE-2026-21126 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 6.9 Medium CVE-2026-21125 Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21124 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21123 Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with… 6.7 Medium

Do you use Samsung Mobile Devices?

Track this CVE Watch Samsung Mobile Devices Check my SBOMs

www.cveye.io/en/cve/CVE-2026-21100

Timeline

Published September 9, 2026
Last modified September 10, 2026

References

security.samsungmobile.com security.samsungmobile.com

Track this CVE