CVE-2026-21017

Medium · 5.5

CVSS

5.5

EPSS

0.1%

Published

Jun 5, 2026

CISA due date

—

The record

Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.

Affected packages

Ecosystem	Package	Introduced	Fixed