6.9
Medium
CVE-2026-21127 Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers…
Description
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Account 15.7 | earliest → < 15.7.01.1 | 15.7.01.1 |
Other CVEs of Samsung Account
The 29 CVEs of Samsung Account →
CVE-2026-20994
URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token
6.9
Medium
CVE-2025-58487
Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary…
4.0
Medium
CVE-2025-58486
Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary…
4.0
Medium
CVE-2025-21076
Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows…
5.5
Medium