CVE-2026-21006

LowCVSS 2.4

Published: 13/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access hidden notification contents. The vulnerability requires physical access to the device.

Risk Assessment

A person with physical access to the device may view hidden notification contents, potentially leading to disclosure of sensitive information.

Recommendation

Install the Samsung SMR Apr-2026 Release 1 update or later. Restrict physical access to devices and enable screen lock.

Other vulnerabilities in Samsung DeX

CVE-2025-21046Low
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access the recent app list.

Original NVD description (English source)

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS