Android Collection Improper Access Control <1.0.1.14 (15) / 2.0.02.7 (16)
CVE-2026-21105 Published on September 9, 2026
Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.
Vulnerability Analysis
CVE-2026-21105 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Affected Versions
Samsung Mobile Collection:- Version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 and below * is unaffected.