CVE-2026-21081CWE-926

CVE-2026-21081

published August 10, 2026

CVSS
5.1
EPSS
0%
Percentile
0.5
In the wild
Unconfirmed
What it is

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.

The record
Technical detail
CVSS
5.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00091 · 0.5th percentile
Weakness
CWE-926 · Improper Export of Android Application Components
Published
2026-08-10T13:17Z
References (1)
https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08 · [email protected]
EPSS history
Timeline
  • 10 AUG 07:43Z
    Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information
    cvelistv5