Medium severity · published Jul 10, 2026
CVE-2026-21053
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox
5.1
CVSS
0.2%
EPSS
No
On KEV
Description
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Samsung Email · Samsung Mobile
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-21053
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-21053
security.samsungmobile.com
https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=07
More from Samsung Email
5.5
CVE-2022-36837
Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive information