Improper Privilege Management in Samsung System Support Service
CVE-2026-21024

6.3MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung System Support Service
Vendor
CVE Published:
13 May 2026

What is CVE-2026-21024?

Samsung System Support Service versions prior to 8.0.8.0 are susceptible to an inadequacy in privilege management. This vulnerability allows local attackers to exploit the system by triggering privileged functions that should not be accessible to unauthorized users. Effective protection measures are needed to prevent unauthorized access and ensure system integrity.

Affected Version(s)

Samsung System Support Service 8.0.8.0

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.