CVE-2026-21139: High severity Samsung Continuity Service for Windows vulnerability

Q: Who is exposed to this issue?

Systems running Samsung Continuity Service for Windows before version 4.6.1217.0 are affected. Exploitation is limited to attackers on an adjacent network or connection context.

Q: Does an attacker need an account or user interaction to exploit it?

No privileges and no user interaction are required according to the supplied CVSS vector. However, exploitation has high attack complexity and requires an adjacent attack vector.

Q: What can an attacker do if exploitation succeeds?

An attacker can manipulate the connected mobile device. The CVSS data indicates high impact to confidentiality and to the integrity of subsequent systems, while availability impact is not indicated.

Q: What version should be deployed to remediate the issue?

Update Samsung Continuity Service for Windows to version 4.6.1217.0 or later. Versions prior to 4.6.1217.0 are affected.

Published Oct 12, 2026

Updated

Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.

Affected Software

1 affected component

Samsung Continuity Service for Windows<4.6.1217.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Samsung Continuity Service for Windows to a version that resolves this vulnerability.
Fixed in 4.6.1217.0

Event History

Oct 12, 2026

CVE Published

via MITRE·04:57 AM

Data Sourced

via MITRE·04:57 AM

DescriptionWeakness

Data Sourced

via NVD·05:17 AM

DescriptionSeverity

Frequently Asked Questions

Who is exposed to this issue?

Systems running Samsung Continuity Service for Windows before version 4.6.1217.0 are affected. Exploitation is limited to attackers on an adjacent network or connection context.

Does an attacker need an account or user interaction to exploit it?

No privileges and no user interaction are required according to the supplied CVSS vector. However, exploitation has high attack complexity and requires an adjacent attack vector.

What can an attacker do if exploitation succeeds?

An attacker can manipulate the connected mobile device. The CVSS data indicates high impact to confidentiality and to the integrity of subsequent systems, while availability impact is not indicated.

What version should be deployed to remediate the issue?

Update Samsung Continuity Service for Windows to version 4.6.1217.0 or later. Versions prior to 4.6.1217.0 are affected.

CVE-2026-21139: High severity Samsung Continuity Service for Windows vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

Does an attacker need an account or user interaction to exploit it?

What can an attacker do if exploitation succeeds?

What version should be deployed to remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

Does an attacker need an account or user interaction to exploit it?

What can an attacker do if exploitation succeeds?

What version should be deployed to remediate the issue?