CVE-2026-20979General(samsung / android)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch samsung android systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege.

samsung CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=02

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

android

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
General: 2 classified signals
Disclosure: 1 classified signal
Peaked 2d ago at 2 mentions (2026-02-04); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

samsung

Products

android

2 versions affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification3 categories

General

250.0%

Disclosure

125.0%

Patch

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-04	2	Disclosure1General1
2026-02-09	1	General1
2026-02-11	1	Patch1

Full discourse4 posts

Un informático a martillazos@martillazosIT239d
Patch
@IMclure @BrodaxOficial Knox acaba de parchear CVE-2026-20978 (bypass KnoxGuardManager) y CVE-2026-20979 en Feb'26. "Usuario normal no nota" tampoco nota que GooglePay requiere conexión a servidores Google para cada transacción NFC. ApplePay tokeniza en Secure Enclave sin roundtrip. Arquitectura manda.
Post summary
The tweet announces that Knox has patched CVE-2026-20978 and CVE-2026-20979, noting a bypass of KnoxGuardManager and contrasting GooglePay’s server round‑trip with ApplePay’s Secure Enclave tokenization.
0000044
53 followersView on X
CRAC Learning - Tech@cracbot241d
General
CVE-2026-20979 (CVSS:8.4, HIGH) is Analyzed. Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary act..https://nvd.nist.gov/vuln/detail/CVE-2026-20979 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet briefly cites CVE‑2026‑20979 with a high CVSS score and notes improper privilege management, but provides no PoC, exploit, patch, or evidence of active exploitation.
0000033
171 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds246d
General
CVE-2026-20979 Local Privilege Escalation in Settings Prior to SMR Feb-2026 Release 1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20979
Post summary
The snippet only lists a CVE identifier and a URL, lacking substantive details or actionable information.
0000057
4.0K followersView on X
CVE@CVEnew246d
Disclosure
CVE-2026-20979 Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege. https://www.cve.org/CVERecord?id=CVE-2026-20979
Post summary
The post announces CVE-2026‑20979, describing an improper privilege‑management flaw that lets local attackers run arbitrary actions with elevated Settings privileges, but it does not provide PoC, exploit code, or patch details.
00000188
56.5K followersView on X

CPE platform detail21 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

21 of 21 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	15.0	-	-
OS	samsung	android	16.0	-	-
OS	samsung	android	16.0	-	-
OS	samsung	android	16.0	-	-
OS	samsung	android	16.0	-	-
OS	samsung	android	16.0	-	-
OS	samsung	android	16.0	-	-
OS	samsung	android	16.0	-	-

Explore more

Back to dashboard samsung CVEs android vulnerabilities

What researchers are saying

CVE-2026-20979

Un informático a martillazos@martillazosITPatch

The tweet announces that Knox has patched CVE-2026-20978 and CVE-2026-20979, noting a bypass of KnoxGuardManager and contrasting GooglePay’s server round‑trip with ApplePay’s Secure Enclave tokenization.

CRAC Learning - Tech@cracbotGeneral

The tweet briefly cites CVE‑2026‑20979 with a high CVSS score and notes improper privilege management, but provides no PoC, exploit, patch, or evidence of active exploitation.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The snippet only lists a CVE identifier and a URL, lacking substantive details or actionable information.

CVE@CVEnewDisclosure

The post announces CVE-2026‑20979, describing an improper privilege‑management flaw that lets local attackers run arbitrary actions with elevated Settings privileges, but it does not provide PoC, exploit code, or patch details.