CVE-2026-21139: High severity Samsung Continuity Service for Windows vulnerability
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Samsung Continuity Service for Windowsto a version that resolves this vulnerability.Fixed in 4.6.1217.0
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running Samsung Continuity Service for Windows before version 4.6.1217.0 are affected. Exploitation is limited to attackers on an adjacent network or connection context.
Does an attacker need an account or user interaction to exploit it?
No privileges and no user interaction are required according to the supplied CVSS vector. However, exploitation has high attack complexity and requires an adjacent attack vector.
What can an attacker do if exploitation succeeds?
An attacker can manipulate the connected mobile device. The CVSS data indicates high impact to confidentiality and to the integrity of subsequent systems, while availability impact is not indicated.
What version should be deployed to remediate the issue?
Update Samsung Continuity Service for Windows to version 4.6.1217.0 or later. Versions prior to 4.6.1217.0 are affected.