EUVD-2026-21856
GHSA-h9qc-47v9-vqv2
Severity by source
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.
AnalysisAI
Samsung DeX prior to the April 2026 Release 1 update contains improper access control that allows physical attackers to access hidden notification contents on affected Samsung mobile devices. The vulnerability requires direct physical access to the device but carries high scope and information integrity impact due to potential exposure of sensitive notification data. No public exploit code has been identified at the time of analysis.
Technical ContextAI
Samsung DeX is Samsung's desktop experience platform that extends mobile device functionality to external displays and peripherals. The vulnerability stems from improper access control mechanisms (CWE classification not specified) that fail to adequately restrict access to notification contents that should be protected from unauthorized viewing. The affected component is present across Samsung mobile devices running DeX versions prior to April 2026 Release 1. The physical attack vector indicates the vulnerability requires an attacker with direct device access, though the notification access may extend beyond the physical interaction scope (as suggested by the high SC and SI indicators in the CVSS vector).
RemediationAI
Update Samsung mobile devices to the April 2026 Release 1 update or later to remediate improper access control in Samsung DeX. Users should navigate to Settings > About phone > Software update and install the latest available security patch. Alternatively, users can check Samsung's security updates page (https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=04) for device-specific patch availability. As a temporary mitigation measure pending patching, physically secure devices to prevent unauthorized access by potential attackers.
More in Samsung Mobile Devices
View allLocal privilege escalation in Samsung Galaxy Watch allows unprivileged local attackers to execute arbitrary code with sy
Stack-based buffer overflow in libril_sem.so - Samsung's Radio Interface Layer shared library - enables privileged local
We need to produce a comprehensive analysis for CVE-2026-21047. Let's gather all provided data: CVE ID, description: "Ou
Google's Secure Folder prior to the March 2026 SMR release improperly exports Android application components, enabling l
Improper access control in the Weaver component of Samsung Mobile devices allows a local attacker without elevated privi
Improper input validation in Samsung Contacts on Samsung Mobile devices prior to SMR Aug-2026 Release 1 enables local at
Unauthorized file deletion via improperly exported Android components in Samsung Contacts prior to SMR Aug-2026 Release
Incorrect privilege assignment in the Telephony component of Samsung Mobile devices prior to SMR Jun-2026 Release 1 perm
Improper permission handling in the Routines automation feature on Samsung Mobile Devices exposes sensitive information
PackageManagerService on Samsung Mobile Devices running Android 14, 15, and 16 allows local attackers without elevated p
AppLock on Samsung Mobile Devices prior to SMR Aug-2026 Release 1 exposes improperly exported Android application compon
Out-of-bounds memory write in Samsung's SveService component allows local attackers holding high privileges to execute a
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today