CVE-2026-21123 : 詳細

CVE-2026-21123

2026-10-12
05h17 +00:00
Improper Privilege Management
A04-Insecure Design
2026-10-16
17h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-269 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

参考資料