CVE-2026-21081

Description

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08