CVE-2026-21023

CVSS Score & Metrics

Base Score

5.5 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N                                    

Vulnerability Description

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.

Vulnerability Details

Published Date

April 29, 2026

Last Modified

May 01, 2026

CWE ID

NVD-CWE-noinfo

Source

NVD

Vendor

Samsung Mobile

Product

Samsung Mobile Devices

External References

https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=03

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment