CVE-2026-21123:详情

CVE-2026-21123

2026-10-12
05h17 +00:00
Improper Privilege Management
A04-Insecure Design
2026-10-16
17h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-269 Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

参考资料