Improper Component Export in Samsung Assistant Affects User Data Security
CVE-2026-20993

4.8MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Assistant
Vendor
CVE Published:
16 March 2026

What is CVE-2026-20993?

The vulnerability identified in Samsung Assistant prior to version 9.3.10.7 allows a local attacker to exploit improperly exported application components. Through this weakness, sensitive and saved information stored within the app can potentially be accessed, exposing users to risks of data leakage. Users are advised to update to the latest version to mitigate this threat.

Affected Version(s)

Samsung Assistant 9.3.10.7

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.