Improper Input Validation in Samsung Email Affects Multiple Versions from Samsung
CVE-2026-21053

5.1MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Email
Vendor
CVE Published:
10 July 2026

What is CVE-2026-21053?

Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to exploit this vulnerability, gaining the ability to create arbitrary files within the application's sandbox environment. This flaw can potentially lead to unauthorized access or manipulation of data stored in the application, highlighting the critical need for users to update to the latest version to mitigate potential risks.

Affected Version(s)

Samsung Email 6.2.13.1

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.