CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-21059: android 16.0; +1 more affected products

CVE-2026-21059. CVSS 3.1 base score 7.1 (HIGH, NVD). EPSS 0.00127 (percentile 0.02164), scored 22-Oct-2026.

Affected technology

android · 16.0
samsung

android · 16.0 · update smr-apr-2026-r1
samsung

android · 16.0 · update smr-aug-2025-r1
samsung

android · 16.0 · update smr-dec-2025-r1
samsung

android · 16.0 · update smr-feb-2026-r1
samsung

android · 16.0 · update smr-jan-2026-r1
samsung

android · 16.0 · update smr-jul-2026-r1
samsung

android · 16.0 · update smr-jun-2026-r1
samsung

android · 16.0 · update smr-mar-2026-r1
samsung

android · 16.0 · update smr-may-2026-r1
samsung

android · 16.0 · update smr-nov-2025-r1
samsung

android · 16.0 · update smr-oct-2025-r1
samsung

android · 16.0 · update smr-sep-2025-r1
samsung

Samsung Mobile Devices · Exact affected versions not specified by the source
Samsung Mobile

Description’s affected range: prior to SMR Aug-2026 Release 1

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · No user interaction required

What an attacker can do

Local attackers can delete file with Samsung Contacts' privilege. Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality and availability impact as none; integrity impact as high.

Published

CWE
CWE-926
CCR priority
28.4 /100 (P4)
CVSS 3.1
7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H · NVD
EPSS
0.00127 · percentile 0.02164 · 2026-10-22
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-21059.html