Improper Component Export in Samsung Assistant

Publication date: 2026-06-05

Last updated on: 2026-06-11

Assigner: Samsung Mobile

Description

Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-05

Last Modified

2026-06-11

Generated

2026-07-15

AI Q&A

2026-06-05

EPSS Evaluated

2026-07-14

NVD

CVE-2026-21032

EUVD

EUVD-2026-34804

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	assistant	to 9.3.14 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves an improper export of Android application components in the SmartHomeWidgetReceiver of Samsung Assistant versions prior to 9.3.14. Because of this misconfiguration, a local attacker can execute arbitrary scripts on the affected device.

Impact Analysis

The vulnerability allows a local attacker to execute arbitrary scripts, which could lead to unauthorized actions or control on the affected device. This may compromise the security and integrity of the device and its data.

Hi! I’m here to help you understand CVE-2026-21032. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70