Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Samsung Mobile | Bixby | affected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Samsung Mobile | Bixby | 100% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 29 Oct 2026 03:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Local Privileged Attackers Can Execute Arbitrary Activities via Bixby Input Validation Flaw | |
| Weaknesses | CWE-20 |
Thu, 29 Oct 2026 03:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Samsung Mobile
Samsung Mobile bixby |
|
| Vendors & Products |
Samsung Mobile
Samsung Mobile bixby |
Thu, 29 Oct 2026 01:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity. | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: SamsungMobile
Published:
Updated: 2026-10-29T01:01:58.516Z
Reserved: 2025-12-11T01:33:35.837Z
Link: CVE-2026-21157
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-29T01:17:23.187
Modified: 2026-10-29T01:17:23.187
Link: CVE-2026-21157
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-29T03:30:15Z
-
CWE-20
Improper Input Validation