CVE-2026-21007

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-21007", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "state": "PUBLISHED", "assignerShortName": "SamsungMobile", "dateReserved": "2025-12-11T01:33:35.803Z", "datePublished": "2026-04-13T05:04:27.024Z", "dateUpdated": "2026-04-13T18:06:16.729Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-754: Improper Check for Unusual or Exceptional Conditions"}]}], "affected": [{"vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "versions": [{"status": "unaffected", "version": "SMR Apr-2026 Release in Android 14, 15, 16", "versionType": "semver", "lessThan": "*"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard."}], "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=04"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "attackVector": "PHYSICAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 4.4, "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "baseSeverity": "MEDIUM"}}], "providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "SamsungMobile", "dateUpdated": "2026-04-13T05:04:27.024Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21007", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-13T17:34:54.189016Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-13T18:06:16.729Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-21007", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-13T17:34:54.189016Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-13T17:57:36.802Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 4.4, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}}], "affected": [{"vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "versions": [{"status": "unaffected", "version": "SMR Apr-2026 Release in Android 14, 15, 16", "lessThan": "*", "versionType": "semver"}], "defaultStatus": "affected"}], "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=04"}], "descriptions": [{"lang": "en", "value": "Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-754: Improper Check for Unusual or Exceptional Conditions"}]}], "providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "SamsungMobile", "dateUpdated": "2026-04-13T05:04:27.024Z"}}}, "cveMetadata": {"cveId": "CVE-2026-21007", "state": "PUBLISHED", "dateUpdated": "2026-04-13T18:06:16.729Z", "dateReserved": "2025-12-11T01:33:35.803Z", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "datePublished": "2026-04-13T05:04:27.024Z", "assignerShortName": "SamsungMobile"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "Samsung Mobile Devices", "vendor": "Samsung Mobile", "versions": [{"lessThan": "*", "status": "unaffected", "version": "SMR Apr-2026 Release in Android 14, 15, 16", "versionType": "semver"}]}], "source": "mobile.security@samsung.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*", "matchCriteriaId": "3093F6FE-C562-4F62-97B7-CA0D2DDF9BBE", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "9CBFF102-91A9-4BCC-BB43-912896BFCCEA", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "DAB2A0D7-8F4F-4128-AE09-D2658D793BF7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "6A89AE5B-4D1A-4ADA-B572-38B1FC4ED54C", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-apr-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "3F58ACB0-BA2B-4AFE-91DC-32CBD70DFD73", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "401980A7-E64A-4773-83EB-C93B50AE0F73", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "CC6E2FC7-2BAF-4C7B-9E0F-D9F844041A35", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "6E12AB0B-728A-4478-B237-78CBAA2A44C5", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-aug-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "26EEF3EC-643F-4A39-8F4C-11F0F534B589", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2021-r1:*:*:*:*:*:*", "matchCriteriaId": "0501033A-0D51-41E8-91A9-E72B6EE3F78D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "2A901EFE-90BA-474C-88D2-8A3E7D99C0E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "DF7B3213-520A-49F0-A183-C73A37A56854", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "9AB6398C-6A3E-4146-9A5C-595BE36047BA", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-dec-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "00EE2529-013A-4F73-8D86-BD1AD613028D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "30F706F3-34F6-4D43-AE5E-C202C700A333", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "FD8B9CD3-063E-481E-BE7C-1628ADA71849", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "12C17130-A0C0-49E1-8525-9D65F0275270", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "E010EDC6-D78E-4126-92B0-2F6A10DE76AC", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-feb-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "344C7BB6-F50A-4548-B95B-3B39DB125AA7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "4FAA7790-A323-4ECA-834E-F19E59C571F5", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "9CE09EF7-B024-4D79-9400-C8223CDFBB86", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "C339A665-413D-443F-AD04-F71C161235D0", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "EB47786E-68AB-4FF1-B9D9-925D65702E4B", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jan-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "4E57A926-3956-4FA6-ABE4-5EA468ECF6CD", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "213AC4D5-3B95-4120-B72D-A9327BADE2BC", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "3DD61EDA-98ED-4309-B54F-0CF8B7D07DC7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "F7DCB465-A0F7-496E-BE45-0B5FA1508D93", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jul-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "52EFD2CA-22E5-4B7A-AC7E-8F86A3C52F5C", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "6D65C03E-7BC3-491A-8621-A8C93FBA0A69", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "4ECB0B7A-590C-460C-878B-9A78CB37D259", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "D66CF415-6C4A-4AF3-B660-B2E9CF484B51", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-jun-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "427A79D5-04E9-46BC-9D8C-471EBD28AAAA", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "31B5B670-ACDE-4A64-97C5-358D79C65080", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "EAFE015F-8130-4F10-A553-420F0BB2A132", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "141E541B-8FA5-4829-A413-4F1DC19E9AE1", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "FFCA253F-EE13-4C52-8CB7-D72C117576D0", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-mar-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "65D075F0-98F7-44ED-B53A-CDD7B7994196", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "77CE3494-F7C0-497B-8491-107D31C9A91F", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "ACEA385E-3931-4438-A2A9-0357651F9B48", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "A57CB118-46CC-4CE8-ACC3-A806CD2C25A9", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-may-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "CEFE0612-FA2E-4629-AE05-33245F1282FE", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2021-r1:*:*:*:*:*:*", "matchCriteriaId": "84F3023F-E65C-4871-A65A-738EFF64D365", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "6DD1F78D-EA98-4825-A0EA-703196DDE5E4", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "BDDB3FBE-99EC-4763-961B-2C436D864A1A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "B5746517-D8FF-4819-9B98-D06B475C6CDF", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "8FBFBC5D-9716-4F07-A9E6-D843AFA06871", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "1B02110E-71FB-495F-86CA-F2A4E55C0E42", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "931CC6D7-A42D-4482-B901-B539DFF89C3E", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "F7EB9C6E-CF84-4E4D-94D8-39233F8EC4DD", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-oct-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "DCC507C7-FB2C-4B74-B1AD-48F939D9C079", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "852A1BEC-438F-4D1E-B361-87BD57D50157", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "84ED2366-D4BA-4094-94AC-AD6E7AEBB6FF", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2024-r1:*:*:*:*:*:*", "matchCriteriaId": "ABFE99DC-4495-4D4F-80D4-C29A1D22A9C5", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:14.0:smr-sep-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "1953308A-E266-4251-AB2F-C64C74BEC241", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "AAFE22F0-4B77-4034-8271-34A131B14D85", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-feb-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "B1E0CF77-4D2C-4BA6-88ED-887DD1984763", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-jan-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "F878069B-37C9-4636-8C31-526B610A0AFA", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-jan-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "03A54EA0-3B86-4236-AA3C-840ACCD174A8", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "1E516E0C-5A39-4657-93F7-16CCA42FA0E8", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "F9B1BCF7-069A-42BC-A654-5C894C92CF1A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "65F036A0-874D-4607-833E-167753748DEB", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:15.0:smr-sep-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "22E4BD84-802F-46CC-A86F-B6256F7915E0", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:-:*:*:*:*:*:*", "matchCriteriaId": "3FD6766A-EC2B-4CA2-9A8E-2BA5C9E9ECF9", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-aug-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "C86A3033-9DD1-47F9-B95D-10F82A31D335", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-dec-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "98C26CF8-228F-4791-B5A3-B65DF709F402", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-feb-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "2BB01FDF-5022-4EAE-9779-F09771BEC443", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-jan-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "E2CCDCC2-A128-4BB4-91CD-E534E06BB24C", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-mar-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "C1BA43B7-5D88-4F5E-B90C-5AE8AC422214", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "0C527C12-5480-4604-A480-1E540095EB5D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-oct-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "B3C64BA1-AF0F-4E65-97BE-3FD1958FFC79", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:16.0:smr-sep-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "79C71CA6-508E-4A19-9014-47FA1BD5A83C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard."}, {"lang": "es", "value": "Verificaci\u00f3n incorrecta de condiciones excepcionales en Device Care antes de la versi\u00f3n 1 de SMR de abril de 2026 permite a atacantes f\u00edsicos eludir Knox Guard."}], "id": "CVE-2026-21007", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "PHYSICAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "mobile.security@samsung.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-21007", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-13T17:34:54.189016Z", "version": "2.0.3"}}]}, "published": "2026-04-13T06:16:05.190", "references": [{"source": "mobile.security@samsung.com", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=04"}], "sourceIdentifier": "mobile.security@samsung.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-754"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,SMR Apr-2026 Release in Android 14, 15, 16]"}}], "original": {"product": "Samsung Mobile Devices", "source": "cna", "vendor": "Samsung Mobile"}, "product": "mobile_devices", "vendor": "samsung"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,SMR Apr-2026 Release in Android 14, 15, 16]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Samsung Mobile Devices", "source": "cna", "vendor": "Samsung Mobile"}, "product": "samsung_mobile_devices", "vendor": "samsung_mobile"}], "analysis": {"en": {"generated_at": "2026-04-14T17:22:56.553224+00:00", "value": {"mitigation_remediation": ["Apply the Samsung Mobile firmware update SMR Apr\u20112026 Release\u00a01 or later", "If the update is not available, restrict physical access to the device", "Keep Device Care and related applications up\u2011to\u2011date", "Consider disabling Knox Guard if it is not required for the device's use case"], "summary": {"action": "Apply Patch", "impact": "Bypass Knox Guard"}, "threat_synthesis": {"affected_systems": "Affected Samsung mobile devices include all models running Android 14.0, 15.0, or 16.0 that have not yet applied the SMR Apr\u20112026 Release\u00a01 update. The list of impacted firmware builds covers SMR releases from 2022 through 2026 for these Android versions, as shown in the provided CPE strings.", "description_and_impact": "Device Care performs an improper check for exceptional conditions before the SMR Apr\u20112026 release. This flaw allows a physical attacker to bypass Knox Guard protection, exposing the device to unauthorized access and potential theft of data. The weakness is a failure to validate guard conditions properly.", "risk_and_exploitability": "The CVSS score of 4.4 indicates a moderate severity, and the EPSS score is below 1 percent, suggesting low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires physical possession of the device, implying that only attackers with direct device access can benefit, yet the impact of bypassing Knox Guard would be significant for both confidentiality and integrity."}}}}, "created": "2026-04-13T12:37:12.302780+00:00", "title": "Device Care Vulnerability Enables Physical Attackers to Bypass Knox Guard", "updated": "2026-04-15T15:45:07.536064+00:00", "vendors": ["samsung", "samsung$PRODUCT$mobile_devices", "samsung_mobile", "samsung_mobile$PRODUCT$samsung_mobile_devices"]}