CVE-2026-20990
Published: 16 March 2026
Summary
CVE-2026-20990 is a high-severity an unspecified weakness vulnerability in Samsung Android. Its CVSS base score is 8.1 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 8.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Enforces approved authorizations to prevent local low-privilege attackers from launching arbitrary activities with Secure Folder privileges due to improper component exports.
Requires timely identification, reporting, and correction of flaws like improper Android application component exports via security updates such as SMR Mar-2026 Release 1.
Applies least privilege to restrict access to Secure Folder components, mitigating escalation from improperly exported activities.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Improper component export allows local low-privileged attackers to launch activities under Secure Folder context, directly enabling local privilege escalation to access protected data and functionality.
NVD Description
Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege.
Deeper analysisAI
CVE-2026-20990 involves improper export of Android application components in Secure Folder prior to SMR Mar-2026 Release 1 on affected Samsung devices. This vulnerability, published on 2026-03-16, carries a CVSS v3.1 base score of 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) and is categorized under NVD-CWE-Other.
Local attackers with low privileges can exploit this issue to launch arbitrary activities using Secure Folder privileges, potentially compromising high levels of confidentiality and integrity without impacting availability.
Samsung's security advisory at https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=03 provides details on the March 2026 updates, with mitigation achieved by applying SMR Mar-2026 Release 1 or later.
Details
- CWE(s)