CVE-2026-20988
Awaiting Analysis
Awaiting Analysis - Queue
Improper Intent Verification in Samsung Settings Enables Privileged Activity
Publication date: 2026-03-16
Last updated on: 2026-03-20
Assigner: Samsung Mobile
Description
Description
Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary activity with Settings privilege. User interaction is required for triggering this vulnerability.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | android | 16.0 |
| samsung | android | 16.0 |
| samsung | android | 16.0 |
| samsung | android | 16.0 |
| samsung | android | 16.0 |
| samsung | android | 16.0 |
| samsung | android | 16.0 |
| samsung | android | 16.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |