CVE-2026-21063
Received Received - Intake

Improper Component Export in AppLock Prior to SMR Aug-2026

Vulnerability report for CVE-2026-21063, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: Samsung Mobile

Description

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
samsung applock to 2026-08-01 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves an improper export of Android application components in AppLock before the SMR Aug-2026 Release 1. It allows physical attackers to bypass the app lock function.

Detection Guidance

This vulnerability involves improper export of Android application components in AppLock, allowing physical attackers to bypass app lock functions. Detection requires checking for exposed components in the AppLock application. Review the app's manifest file for exported components and verify if any sensitive activities or services are unintentionally exposed.

Impact Analysis

Physical attackers could bypass the app lock on your device, gaining unauthorized access to protected applications and data without needing credentials.

Compliance Impact

This vulnerability allows physical attackers to bypass app lock functions, potentially exposing sensitive data. This could lead to violations of data protection regulations like GDPR or HIPAA if unauthorized access occurs.

Mitigation Strategies

Update AppLock to the latest version from the SMR Aug-2026 Release 1 or later to address the improper export of application components.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21063. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart