CVE-2026-21016
Medium · 5.5CVSS
5.5
EPSS
0.1%
Published
May 13, 2026
CISA due date
—
The record
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|