Improper Component Export in Samsung AppLock Application
CVE-2026-21063

6.8MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
10 August 2026

What is CVE-2026-21063?

The AppLock application from Samsung has a vulnerability related to the improper export of application components prior to the SMR Aug-2026 Release 1. This security flaw allows physical attackers to potentially bypass the app locking functionality, exposing sensitive user data and compromising the overall security of the device.

Affected Version(s)

Samsung Mobile Devices SMR Aug-2026 Release in Android 14, 15, 16

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.