Samsung LockSettings Improper Privilege Management (CVE-2026-21123)
CVE-2026-21123 Published on October 12, 2026
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.
Vulnerability Analysis
CVE-2026-21123 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Products Associated with CVE-2026-21123
Want to know whenever a new CVE is published for Samsung Mobile Devices? stack.watch will email you.
Affected Versions
Samsung Mobile Devices:- Version SMR Oct-2026 Release in Android 14, 15, 16, 17 and below * is unaffected.