CVE-2026-21053

MediumCVSS 5.1

Published: 10/07/2026(UTC)Updated: 25/10/2026(UTC)Translated: 11/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox.

Risk Assessment

The risk involves potential compromise of application data integrity by a local attacker, which could lead to privilege escalation or further attacks on the device.

Recommendation

It is recommended to immediately update Samsung Email to version 6.2.13.1 or later, which includes a fix for this vulnerability.

Other vulnerabilities in Samsung Email

CVE-2025-21077Low
Samsung Email prior to version 6.2.06.0 has improper input validation. It allows local attackers to launch arbitrary activities with Samsung Email privileges.

Original NVD description (English source)

Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS