Improper Component Export in Samsung Assistant

Publication date: 2026-06-05

Last updated on: 2026-06-11

Assigner: Samsung Mobile

Description

Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-05

Last Modified

2026-06-11

Generated

2026-07-16

AI Q&A

2026-06-05

EPSS Evaluated

2026-07-14

NVD

CVE-2026-21033

EUVD

EUVD-2026-34805

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	assistant	to 9.3.14 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability involves an improper export of Android application components in the ExpressHomeWidgetReceiver of Samsung Assistant versions prior to 9.3.14. It allows a local attacker to execute arbitrary scripts on the affected device.

Impact Analysis

The vulnerability can allow a local attacker to execute arbitrary scripts, which may lead to unauthorized actions or compromise of the device's security. This could result in data manipulation, unauthorized access, or other malicious activities depending on the attacker's intent.

Hi! I’m here to help you understand CVE-2026-21033. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70