CVEDB API

Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 5.8%

CVSS Severity

CVSS v3 Score 5.5

References

Products affected by CVE-2026-21000

Samsung » Galaxy Store » Version: N/A

cpe:2.3:a:samsung:galaxy_store:-
Samsung » Galaxy Store » Version: 1.0.06.29

cpe:2.3:a:samsung:galaxy_store:1.0.06.29
Samsung » Galaxy Store » Version: 4.5.32.4

cpe:2.3:a:samsung:galaxy_store:4.5.32.4
Samsung » Galaxy Store » Version: 4.5.36.4

cpe:2.3:a:samsung:galaxy_store:4.5.36.4
Samsung » Galaxy Store » Version: 4.5.41.8

cpe:2.3:a:samsung:galaxy_store:4.5.41.8
Samsung » Galaxy Store » Version: 4.5.63.6

cpe:2.3:a:samsung:galaxy_store:4.5.63.6
Samsung » Galaxy Store » Version: 4.5.64.4

cpe:2.3:a:samsung:galaxy_store:4.5.64.4
Samsung » Galaxy Store » Version: 4.5.71.8

cpe:2.3:a:samsung:galaxy_store:4.5.71.8
Samsung » Galaxy Store » Version: 4.5.81.0

cpe:2.3:a:samsung:galaxy_store:4.5.81.0
Samsung » Galaxy Store » Version: 4.5.87.6

cpe:2.3:a:samsung:galaxy_store:4.5.87.6
Samsung » Galaxy Store » Version: 4.5.90.7

cpe:2.3:a:samsung:galaxy_store:4.5.90.7
Samsung » Galaxy Store » Version: 4.6.02.0

cpe:2.3:a:samsung:galaxy_store:4.6.02.0