Vulnerability Details CVE-2026-21112
Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 0.5%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2026-21112
-
cpe:2.3:o:samsung:android:10.0
-
cpe:2.3:o:samsung:android:11.0
-
cpe:2.3:o:samsung:android:12.0
-
cpe:2.3:o:samsung:android:13.0
-
cpe:2.3:o:samsung:android:14.0
-
cpe:2.3:o:samsung:android:15.0
-
cpe:2.3:o:samsung:android:16.0
-
cpe:2.3:o:samsung:android:8.0
-
cpe:2.3:o:samsung:android:8.1
-
cpe:2.3:o:samsung:android:9.0