CVE-2026-21009
Improper Exception Handling in Recents Enables App Pinning Bypass
Publication date: 2026-04-13
Last updated on: 2026-04-15
Assigner: Samsung Mobile
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 14.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 16.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 16.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 16.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 16.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 16.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 16.0 |
| samsung | android | 15.0 |
| samsung | android | 15.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 16.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 16.0 |
| samsung | android | 14.0 |
| samsung | android | 15.0 |
| samsung | android | 16.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-754 | The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves an improper check for exceptional conditions in the Recents feature of Samsung devices prior to the SMR Apr-2026 Release 1. It allows a physical attacker to bypass App Pinning, which is a security feature designed to restrict access to a specific app.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing a physical attacker to bypass App Pinning on affected Samsung devices. This means that an attacker with physical access could potentially access other apps or data that should have been restricted by the App Pinning feature, leading to unauthorized access.