CVE-2026-20991

MEDIUM

Samsung Mobile Devices - Privilege Escalation

Title source: llm

Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents.

CVSS v3 4.4

EPSS 0.0002

EPSS Percentile 3.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Status published

Products (50)

samsung/android

... and 40 more

Published Mar 16, 2026

Tracked Since Mar 16, 2026