CVE-2026-21107: Samsung Notes

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.

Affected products

• Samsung Notes: before 4.4.45.5 (fixed in 4.4.45.5)

Published 2026-09-09. Last modified 2026-09-23.