EUVD-2026-21860
GHSA-hgj3-xj27-6wfp
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.
AnalysisAI
Samsung Mobile S Share application prior to the April 2026 SMR Release 1 exposes sensitive information to adjacent network attackers without requiring authentication, achieved through a low-complexity attack requiring only user interaction. The vulnerability has a CVSS 5.1 score reflecting limited confidentiality impact over an adjacent network, and is addressed in the April 2026 security patch release.
Technical ContextAI
S Share is a Samsung Mobile file-sharing application that operates on local network protocols accessible to adjacent attackers (devices on the same network segment). The vulnerability stems from insufficient access controls or improper data protection mechanisms in the application's information handling routines prior to the April 2026 SMR patch. The CVSS vector indicates an adjacent attack vector (AV:A) with low complexity (AC:L), no timing constraints (AT:N), and no special privileges required (PR:N), though user interaction is necessary (UI:P). The impact is restricted to confidentiality loss (VC:L) with no integrity or availability impact. The affected product classification spans Samsung Mobile devices across all versions prior to the April 2026 update, as indicated by the CPE wildcard pattern for samsung_mobile:samsung_mobile_devices.
RemediationAI
Update Samsung Mobile devices to the April 2026 SMR Release 1 patch or later, which addresses the S Share information exposure vulnerability. Check the Samsung Mobile security update portal at https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=04 for device-specific patch availability and installation instructions. As a temporary mitigation prior to patching, restrict S Share usage on untrusted networks, disable S Share when not in active use, and ensure devices are connected only to trusted Wi-Fi networks (not open or guest networks). Consider disabling Wi-Fi and relying on cellular connectivity for sensitive operations until patched.
More in Samsung Mobile Devices
View allOut-of-bounds write in Samsung's Keymaster trustlet - a Trusted Execution Environment (TEE) component running in ARM Tru
Local privilege escalation to root in Samsung's DualDAR (Dual Data-at-Rest) encryption component affects Samsung mobile
Remote code execution in Samsung Mobile Devices arises from a heap-based buffer overflow in the JPEG decoding path of li
Remote code execution in the DNG (Adobe Digital Negative) image decoder within Samsung's Quram imaging library (libimage
Path traversal in Samsung's ImsService (IP Multimedia Subsystem Service) on Android 14 through 17 permits remote unauthe
Out-of-bounds write in libmdnie.so on Samsung Mobile Devices running Android 15, 16, and 17 enables local attackers to e
Local privilege escalation in Samsung Galaxy Watch allows unprivileged local attackers to execute arbitrary code with sy
Stack-based buffer overflow in libril_sem.so - Samsung's Radio Interface Layer shared library - enables privileged local
Improper input validation in Samsung's DualDAR kernel driver enables a local privileged attacker to escalate privileges
We need to produce a comprehensive analysis for CVE-2026-21047. Let's gather all provided data: CVE ID, description: "Ou
Google's Secure Folder prior to the March 2026 SMR release improperly exports Android application components, enabling l
Heap buffer overflow in Samsung KnoxVault trustlet (hwvault trusted application) on Samsung Mobile Devices prior to SMR
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today