Security Advisory

CVE-2026-20988

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-16 04:31:53
Last updated 2026-03-17 03:55:31
Assigner SamsungMobile
State PUBLISHED

Description

Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary activity with Settings privilege. User interaction is required for triggering this vulnerability.