CVE-2026-21105

MediumCVSS 5.5/10Last modified Sep 23, 2026

Description

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Sep 9, 2026
Last modified
Sep 23, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-211065.1Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enCVE-2026-211075.5Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.CVE-2026-211085.5Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive inforCVE-2026-211092.1Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.CVE-2026-21114.3A weakness has been identified in JeecgBoot up to 3.9.0. Affected by this issue is some unknown functionality of the file /airag/knowledge/dCVE-2026-211106.9Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.CVE-2026-211116.9Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.CVE-2026-211125.5Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilegCVE-2026-211135.5Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call wiCVE-2026-211147.0Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.CVE-2026-211155.1Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.CVE-2026-211165.1Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21105: Medium severity, CVSS 5.5 | Vulnix