CVE-2026-21054

Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data

Medium · published July 10, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00151 · 3.9th percentile
Published
2026-07-10T04:58Z
EPSS history
Timeline
  • 10 JUL 04:58Z
    Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data
    cvelistv5