CVE-2026-20979: High severity Samsung Android vulnerability
Published Feb 4, 2026
·Updated
Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege.
Affected Software
21 affected components
Samsung Android=15.0
Samsung Android=15.0-smr-apr-2025-r1
Samsung Android=15.0-smr-aug-2025-r1
Samsung Android=15.0-smr-dec-2025-r1
Samsung Android=15.0-smr-feb-2025-r1
Samsung Android=15.0-smr-jan-2025-r1
Samsung Android=15.0-smr-jan-2026-r1
Samsung Android=15.0-smr-jul-2025-r1
Samsung Android=15.0-smr-jun-2025-r1
Samsung Android=15.0-smr-mar-2025-r1
Samsung Android=15.0-smr-may-2025-r1
Samsung Android=15.0-smr-nov-2025-r1
Samsung Android=15.0-smr-oct-2025-r1
Samsung Android=15.0-smr-sep-2025-r1
Samsung Android=16.0
Samsung Android=16.0-smr-aug-2025-r1
Samsung Android=16.0-smr-dec-2025-r1
Samsung Android=16.0-smr-jan-2026-r1
Samsung Android=16.0-smr-nov-2025-r1
Samsung Android=16.0-smr-oct-2025-r1
Samsung Android=16.0-smr-sep-2025-r1
Event History
Feb 4, 2026
CVE Published
via MITRE·06:14 AM
Data Sourced
via MITRE·06:14 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-20979?
CVE-2026-20979 is classified as a high-severity vulnerability due to improper privilege management.
2
How do I fix CVE-2026-20979?
To fix CVE-2026-20979, update to the SMR Feb-2026 Release 1 or later version of the affected Samsung Android software.
3
Who is affected by CVE-2026-20979?
CVE-2026-20979 affects users of Samsung Android versions 15.0 and 16.0 prior to the SMR Feb-2026 Release 1.
4
What type of attack does CVE-2026-20979 enable?
CVE-2026-20979 allows local attackers to launch arbitrary activities with elevated Settings privileges.
5
Is CVE-2026-20979 an ongoing threat?
CVE-2026-20979 poses an ongoing threat to unpatched devices until they are updated to the recommended software version.