CVEvulnerability
CVE-2026-21081
5.1 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-08-10
- Last modified
- 2026-10-23
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 5.1 MEDIUM — CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weaknesses
- CWE-926
Description
Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
Related
Weakness · CWE (1)
- CWE-926 Improper Export of Android Application Components weakness
References
- https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08 security.samsungmobile.com