CVE-2026-21120: Use After Free

Q: Who can exploit this issue?

Exploitation requires local attacker access to a device running the affected Samsung WSM service. The issue may allow arbitrary code execution with system privilege.

Q: What privileges could an attacker obtain?

A successful exploit could potentially execute arbitrary code with system privilege.

Q: Which release addresses the issue?

The issue is described as affecting the WSM service prior to the SMR Oct-2026 Release 1 update.

Published Oct 12, 2026

Updated

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.

Affected Software

1 affected component

Samsung WSM service<SMR Oct-2026 Release 1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WSM service to a version that resolves this vulnerability.
Patch SMR Oct-2026 Release 1

Event History

Oct 12, 2026

CVE Published

via MITRE·04:57 AM

Data Sourced

via MITRE·04:57 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

Exploitation requires local attacker access to a device running the affected Samsung WSM service. The issue may allow arbitrary code execution with system privilege.

What privileges could an attacker obtain?

A successful exploit could potentially execute arbitrary code with system privilege.

Which release addresses the issue?

The issue is described as affecting the WSM service prior to the SMR Oct-2026 Release 1 update.

CVE-2026-21120: Use After Free

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What privileges could an attacker obtain?

Which release addresses the issue?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What privileges could an attacker obtain?

Which release addresses the issue?