Medium severity · published May 13, 2026
CVE-2026-21024
Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 allows local attackers to trigger privileged functions
6.3
CVSS
0.1%
EPSS
No
On KEV
Description
Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 allows local attackers to trigger privileged functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 0% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Samsung System Support Service · Samsung Mobile
All versions, or not specified · source: vendor
Affected product
SS
Samsung System Support Service
Samsung Mobile