CVE-2026-20992

LOW

Samsung Mobile Devices - Privilege Escalation

Title source: llm

Description

Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application.

References (1)

https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=03

Scores

CVSS v3 3.3

EPSS 0.0002

EPSS Percentile 4.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

CWE

CWE-863

Status published

Products (1)

samsung/android 13.0 (50 CPE variants)

Published Mar 16, 2026

Tracked Since Mar 16, 2026