CVE-2026-21127: Samsung Samsung Account vulnerability

A local attacker can exploit it. The available information does not indicate that remote or unauthenticated exploitation is possible.

Samsung Account versions prior to 15.7.01.1 are affected. Version 15.7.01.1 is not described as affected.

The issue can allow a local attacker to access sensitive data through improperly exported Android application components.

Published Oct 12, 2026

Updated

Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.

Affected Software

1 affected component

Samsung Samsung Account<15.7.01.1

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Samsung Account to a version that resolves this vulnerability.
Fixed in 15.7.01.1

Oct 12, 2026

CVE Published

via MITRE·04:57 AM

Data Sourced

via MITRE·04:57 AM

DescriptionWeakness

A local attacker can exploit it. The available information does not indicate that remote or unauthenticated exploitation is possible.

Samsung Account versions prior to 15.7.01.1 are affected. Version 15.7.01.1 is not described as affected.

The issue can allow a local attacker to access sensitive data through improperly exported Android application components.