CVE-2026-21081

MediumCVSS 5.1

Published: 10/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

1th percentile - higher than 1% of all known CVEs

Summary

Improper export of Android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required.

Risk Assessment

A local attacker could leverage user interaction to access confidential data, potentially leading to identity theft or credential compromise.

Recommendation

Update SamsungPassAutofill to the latest version that includes the fix.

Original NVD description (English source)

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.