CVE-2026-21157
Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to…
- Risk score
- 50/100
- CVSS
- 8.3 v4.0
- Published
- 29 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.
- Affected
- See advisory
- Fix
- Upgrade the product to 4.0.85.6 or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 8.3 high
References
Original description
Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.
Last activity 29 Oct 2026. Patch Forecast updates every hour.