CVE-2026-21123EPSS p3.3%

CVE-2026-21123CVE-2026-21123

Description

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.

Scoring

EPSS0.14% probability of exploitation · percentile 3.3% · 2026-10-17T12:00:28Z
Last modified2026-10-16
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.