CVE-2026-21059
Received Received - Intake

Improper Component Export in Samsung Contacts

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: Samsung Mobile

Description
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-21059
EUVD
EUVD-2026-55084

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
samsung contacts to aug-2026 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper export of Android application components in Samsung Contacts prior to the SMR Aug-2026 Release 1. It allows local attackers to delete files using Samsung Contacts' elevated privileges.

Impact Analysis

Local attackers could exploit this to delete files on your device that are accessible to Samsung Contacts, potentially causing data loss or disrupting functionality.

Compliance Impact

The vulnerability allows local attackers to delete files with Samsung Contacts' privilege, which could lead to unauthorized data deletion. This may impact compliance with GDPR (data integrity requirements) and HIPAA (integrity and availability of protected health information) if sensitive data is affected.

Mitigation Strategies

Update Samsung Contacts to the latest version from the SMR Aug-2026 Release 1 or later to address the improper export of application components.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21059. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart