Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow…
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Samsung
- Product
- Galaxy / One UI / Knox / SmartThings
- Exposure class
- Mobile OS
Why it ranks 5 (Routine)
- Product class: mobile OS
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-21131 on this site · NVD · CVE.org · Vulnpedia