CVE-2026-21033

Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute…

Medium · published June 5, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
0.5
In the wild
Unconfirmed
What it is

Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00093 · 0.5th percentile
Published
2026-06-05T10:15Z
EPSS history
Timeline
  • 05 JUN 10:15Z
    Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute…
    cvelistv5