CVE-2026-20990

High CVSS: 8.4

Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege.

Vendor

Samsung

Product

Android

CWE

NVD-CWE-Other

Yayın Tarihi

2026-03-16 14:18:09

Güncelleme

2026-03-20 13:48:21

Source Identifier

mobile.security@samsung.com

KEV Date Added

Kategoriler

NVD-CWE-Other Android HIGH Samsung 2026

Referanslar

https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=03

Benzer Kayıtlar

High

CVE-2026-21000

Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store…

Medium

CVE-2026-21001

Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privileg…

Medium

CVE-2026-21002

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to inst…

Medium

CVE-2026-21004

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of serv…

High

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Sm…

Medium

CVE-2026-20992

Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the back…