VDB
CVE-2026-21112
CVE-2026-21112
PUBLISHED
CVSS 5.1 MEDIUM
Reported by SamsungMobile · Published September 9, 2026
Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.
Risk Scores
CVSS 4.0
5.1
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samsung Mobile | Samsung Tips | Android 17 |
| Samsung Mobile | Samsung Tips | Android 17, Android 17 |
Timeline
- Sep 9, 2026 EPSS Score
- Sep 9, 2026 Coalition ESS Score
- Sep 9, 2026 CVE Published
- Sep 10, 2026 CVE Updated
- Sep 24, 2026 EPSS Score
- Oct 25, 2026 EPSS Score