CVE-2026-21055

HighCVSS 8.5

Published: 10/07/2026(UTC)Updated: 11/07/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

The vulnerability in Bixby prior to version 4.0.70.8 is caused by improper export of Android application components. A local attacker can exploit this to execute arbitrary commands with Bixby privileges.

Risk Assessment

The risk involves potential privilege escalation by a local attacker, which could lead to unauthorized access to data or system functions.

Recommendation

It is recommended to immediately update Bixby to version 4.0.70.8 or later, which fixes this vulnerability.

Other vulnerabilities in Bixby

CVE-2026-21074High
Incorrect default permissions in Bixby prior to version 4.0.86.0 allow local attackers to execute arbitrary commands with Bixby privilege.

Original NVD description (English source)

Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege.