CVE-2026-3291 MEDIUM

CVE-2026-3291: Samsung Print Service Plugin – Potential Information Disclosure

Vendor Hp, Inc

Product Samsung Print Service Plugin

Weakness CWE-926

Published May 6, 2026

Last update May 7, 2026

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities.

Key dates

02Disclosure timeline

May 6, 2026 CVE published

May 7, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-3291 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/926.html

Related vulnerabilities

04Related CVE

CVE-2021-4438 kyivstarteam react-native-sms-user-consent SmsUserConsentModule.kt registerReceiver improper export of android application components CVE-2025-8210 Yeelink Yeelight App com.yeelight.cherry AndroidManifest.xml improper export of android application components CVE-2025-14517 Yalantis uCrop AndroidManifest.xml UCropActivity improper export of android application components CVE-2023-44121 LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere CVE-2023-41816