CVE-2026-20983

Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with…

High · published February 4, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

⚡ Local attackers can launch activities with Samsung Dialer privileges, turning your device into a playground for mischief! 🔥 Think of this vulnerability like a hotel where staff can access any room without proper checks — they just need to know the right door to open! 🏨 This means a malicious user could potentially disturb your privacy by launching unauthorized activities, like making calls or accessing sensitive information, all while masquerading as the trusted Samsung Dialer. It’s a serious breach of trust, and could lead to potentially devastating consequences if sensitive data gets into the wrong hands!

Put simply

Think of this vulnerability like a hotel where staff can access any room without proper checks — they just need to know the right door to open! 🏨 The vulnerability stems from improper export of application components in the Samsung Dialer, allowing local attackers to exploit these components and run arbitrary activities with the app's privileges.

What to do

This means a malicious user could potentially disturb your privacy by launching unauthorized activities, like making calls or accessing sensitive information, all while masquerading as the trusted Samsung Dialer. It’s a serious breach of trust, and could lead to potentially devastating consequences if sensitive data gets into the wrong hands! To protect yourself, update your Samsung Dialer to the latest version as soon as the SMR Feb-2026 Release 1 is available. Additionally, review app permissions for third-party applications to ensure they aren't granting excessive access. Stay vigilant! You've got this! Patch up your device, and you'll be back to enjoying peace of mind in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00142 · 3.2th percentile
Published
2026-02-04T06:14Z
EPSS history
Timeline
  • 04 FEB 06:14Z
    Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with…
    cvelistv5