Improper Input Validation in Samsung Contacts Affects User Data Access
CVE-2026-21060

6.7MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
10 August 2026

What is CVE-2026-21060?

An improper input validation vulnerability in Samsung Contacts allows physical attackers to exploit weaknesses in the application, potentially gaining unauthorized access to sensitive data spanning multiple user profiles. This could impact user privacy and security significantly.

Affected Version(s)

Samsung Mobile Devices SMR Aug-2026 Release in Android 14, 15, 16

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V4

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.