CVE-2026-21081

Awaiting Analysis Awaiting Analysis - Queue

Improper Component Export in Samsung Pass Autofill

Publication date: 2026-08-10

Last updated on: 2026-08-18

Assigner: Samsung Mobile

Description

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-18

Generated

2026-08-30

AI Q&A

2026-08-10

EPSS Evaluated

2026-08-29

NVD

CVE-2026-21081

EUVD

EUVD-2026-55106

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	passautofill	to 5.2.10.x (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-926	The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.

Attack-Flow Graph

Executive Summary

This vulnerability is in SamsungPassAutofill versions before 5.2.10.x. It involves improper export of Android app components, allowing local attackers to access sensitive information. User interaction is required to trigger the issue.

Detection Guidance

To detect this vulnerability, check if SamsungPassAutofill is running an outdated version prior to 5.2.10.x. Inspect installed packages on Android devices using adb shell pm list packages | grep -i samsungpassautofill. Verify the version with dumpsys package com.samsung.android.samsungpassautofill | grep version.

Impact Analysis

Local attackers could exploit this to access sensitive data stored or processed by the SamsungPassAutofill app. This may lead to unauthorized access to personal or confidential information.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, potentially violating GDPR (data protection) or HIPAA (health information privacy) if sensitive user data is compromised. Compliance may be impacted if the app handles regulated data.

Mitigation Strategies

Update SamsungPassAutofill to version 5.2.10.x or later to address the improper export of application components.

Hi! I’m here to help you understand CVE-2026-21081. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70