CVE-2026-20976
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2026-01-09
Last updated on: 2026-01-09
Assigner: Samsung Mobile
Description
Description
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | galaxy_store | to 4.6.02 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper input validation issue in the Galaxy Store application prior to version 4.6.02. It allows a local attacker to execute arbitrary scripts on the affected system.
How can this vulnerability impact me? :
The vulnerability can allow a local attacker to run arbitrary scripts, which may lead to unauthorized actions or compromise of the affected device's security.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70