{"id":"CVE-2026-21118","published":"2026-10-12T05:17:00.290","lastModified":"2026-10-16T16:17:06.227","description":"Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-284"],"vendors":[],"products":[],"references":[{"url":"https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=10","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}