CVE-2026-21033

6.9MEDIUM

Key Information:

Vendor: Samsung
Status: Samsung Assistant
Vendor: CVE Published:; 5 June 2026

What is CVE-2026-21033?

Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

Affected Version(s)

Samsung Assistant 9.3.14

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:

6.9

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 5, 2026
Vulnerability Reserved
Dec 11, 2025

CVE-2026-21033 Data

JSON