Improper Export Vulnerability in SamsungPassAutofill for Android Devices
CVE-2026-21081

5.1MEDIUM

Key Information:

Vendor

Samsung
Status
Samsungpassautofill
Vendor
CVE Published:
10 August 2026

What is CVE-2026-21081?

An improper export vulnerability exists in SamsungPassAutofill for Android devices prior to version 5.2.10.x. This flaw permits local attackers to access sensitive information from application components, requiring user interaction to exploit. Users need to be cautious as this vulnerability may expose their personal data through unintended access routes.

Affected Version(s)

SamsungPassAutofill 5.2.10.x

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.