CVE-2026-21031 Details
Description
Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.
A vulnerability in the AppBlock feature of Samsung devices, present in versions of Android prior to the June 2026 Security Maintenance Release, allows local attackers to launch arbitrary activities. This issue arises from improper authorization and requires user interaction to be triggered.
Users can update to the June 2026 Security Maintenance Release to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=06 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| samsung android | 15.0 - 15.0 smr-apr-2025-r1 15.0 smr-apr-2026-r1 15.0 smr-aug-2025-r1 15.0 smr-dec-2025-r1 15.0 smr-feb-2025-r1 15.0 smr-feb-2026-r1 15.0 smr-jan-2025-r1 15.0 smr-jan-2026-r1 15.0 smr-jul-2025-r1 15.0 smr-jun-2025-r1 15.0 smr-mar-2025-r1 15.0 smr-mar-2026-r1 15.0 smr-may-2025-r1 15.0 smr-may-2026-r1 15.0 smr-nov-2025-r1 15.0 smr-oct-2025-r1 15.0 smr-sep-2025-r1 16.0 - 16.0 smr-apr-2026-r1 16.0 smr-aug-2025-r1 16.0 smr-dec-2025-r1 16.0 smr-feb-2026-r1 16.0 smr-jan-2026-r1 16.0 smr-mar-2026-r1 16.0 smr-may-2026-r1 16.0 smr-nov-2025-r1 16.0 smr-oct-2025-r1 16.0 smr-sep-2025-r1 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 6, 2026 | Initial Analysis | [email protected] |
| Jun 5, 2026 | New CVE Received | [email protected] |