6.9
Medium
CVE-2026-21033 Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version…
Description
Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Assistant 9.3 | earliest → < 9.3.14 | 9.3.14 |
Other CVEs of Samsung Assistant
The 5 CVEs of Samsung Assistant →
CVE-2026-21032
Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version…
6.9
Medium
CVE-2026-20993
Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker…
4.8
Medium
CVE-2024-34661
Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers…
4.3
Medium
CVE-2023-30736
Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute…
4.4
Medium