8.5
High
CVE-2026-21055 Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute…
Description
Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Bixby 4.0 | earliest → < 4.0.70.8 | 4.0.70.8 |
Other CVEs of Bixby
The 4 CVEs of Bixby →
CVE-2026-21157
Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary…
8.3
High
CVE-2026-21074
Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands…
7.2
High
CVE-2021-25380
Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions…
5.8
Medium