Vulnerabilities ›

CVE-2026-21016

Medium

                    Published: May 13, 2026                      ·  Modified: May 16, 2026                      ·  Source: NVD                

CVSS v3

5.5

🔗 NVD Official

📄 Description (English)

Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.

🤖 AI Executive Summary

CVE-2026-21016 is a privilege escalation vulnerability in LocationManager that allows local attackers to access sensitive information through incorrect privilege assignment. The vulnerability affects versions prior to the May-2026 Release 1 update.

📄 Description (Arabic)

تحتوي ثغرة CVE-2026-21016 على خلل في تعيين الامتيازات في LocationManager يسمح للمهاجمين المحليين بالوصول إلى المعلومات الحساسة. تؤثر الثغرة على الإصدارات السابقة لإصدار SMR مايو 2026 الإصدار 1.

🤖 ملخص تنفيذي (AI)

This vulnerability in LocationManager allows local attackers to access sensitive information due to improper privilege assignment. It affects systems running versions before the May-2026 Release 1 patch.

🤖 AI Intelligence Analysis Analyzed: May 25, 2026 17:54

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: medium

🏢 Affected Saudi Sectors

telecom government healthcare

🎯 MITRE ATT&CK Techniques

T1548.004 T1548 T1087

⚖️ Saudi Risk Score (AI)

5.0

/ 10.0

🔧 Remediation Steps (English)

Update LocationManager to SMR May-2026 Release 1 or later immediately. Implement principle of least privilege for application permissions. Restrict local access to LocationManager components. Monitor system logs for unauthorized privilege escalation attempts.

🔧 خطوات المعالجة (العربية)

قم بتحديث LocationManager إلى إصدار SMR مايو 2026 الإصدار 1 أو أحدث فوراً. طبق مبدأ أقل امتياز للأذونات. قيد الوصول المحلي لمكونات LocationManager. راقب سجلات النظام للكشف عن محاولات تصعيد الامتيازات غير المصرح بها.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

5.1.1 5.1.2

🔵 SAMA CSF

AC-2 AC-3

🟡 ISO 27001:2022

A.9.2.1 A.9.2.5

🔗 References & Sources 1

🔗

https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=05

mobile.security@samsung.com

Vendor Advisory

📦 Affected Products / CPE 50 entries

samsung:android:14.0

📊 CVSS Score

5.5

/ 10.0 — Medium

📊 CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack VectorL — Low / Local

Attack ComplexityL — Low / Local

Privileges RequiredL — Low / Local

User InteractionN — None / Network

ScopeU — Unchanged

ConfidentialityH — High

IntegrityN — None / Network

AvailabilityN — None / Network

📋 Quick Facts

Severity Medium

CVSS Score5.5

EPSS0.01%

Exploit No

Patch ✗ No

Published 2026-05-13

Source Feed nvd

🇸🇦 Saudi Risk Score

5.0

/ 10.0 — Saudi Risk

Priority: MEDIUM

🏢 Vendor Advisories

🔗 https://security.samsungmobile.com/securityUpdate.sm...

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2026-21016

Introduce Yourself

Sign In Required