Vulnerability Database

321,672

Total vulnerabilities in the database

CVE-2026-20979

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege.

  • Published: Feb 4, 2026
  • Updated: Feb 6, 2026
  • CVE: CVE-2026-20979
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

No CWE or OWASP classifications available.

Software From Fixed in
samsung / android 15.0 15.0.x
samsung / android 15.0-smr-apr-2025-r1 15.0-smr-apr-2025-r1.x
samsung / android 15.0-smr-aug-2025-r1 15.0-smr-aug-2025-r1.x
samsung / android 15.0-smr-dec-2025-r1 15.0-smr-dec-2025-r1.x
samsung / android 15.0-smr-feb-2025-r1 15.0-smr-feb-2025-r1.x
samsung / android 15.0-smr-jan-2025-r1 15.0-smr-jan-2025-r1.x
samsung / android 15.0-smr-jan-2026-r1 15.0-smr-jan-2026-r1.x
samsung / android 15.0-smr-jul-2025-r1 15.0-smr-jul-2025-r1.x
samsung / android 15.0-smr-jun-2025-r1 15.0-smr-jun-2025-r1.x
samsung / android 15.0-smr-mar-2025-r1 15.0-smr-mar-2025-r1.x
samsung / android 15.0-smr-may-2025-r1 15.0-smr-may-2025-r1.x
samsung / android 15.0-smr-nov-2025-r1 15.0-smr-nov-2025-r1.x
samsung / android 15.0-smr-oct-2025-r1 15.0-smr-oct-2025-r1.x
samsung / android 15.0-smr-sep-2025-r1 15.0-smr-sep-2025-r1.x
samsung / android 16.0 16.0.x
samsung / android 16.0-smr-aug-2025-r1 16.0-smr-aug-2025-r1.x
samsung / android 16.0-smr-dec-2025-r1 16.0-smr-dec-2025-r1.x
samsung / android 16.0-smr-jan-2026-r1 16.0-smr-jan-2026-r1.x
samsung / android 16.0-smr-nov-2025-r1 16.0-smr-nov-2025-r1.x
samsung / android 16.0-smr-oct-2025-r1 16.0-smr-oct-2025-r1.x
samsung / android 16.0-smr-sep-2025-r1 16.0-smr-sep-2025-r1.x