CVE-2026-21081: Medium severity Samsung SamsungPass Autofill vulnerability
Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SamsungPassAutofillto a version that resolves this vulnerability.Fixed in 5.2.10.x
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21081?
CVE-2026-21081 has a risk rating of 34 indicating a moderate level of severity.
What applications are affected by CVE-2026-21081?
CVE-2026-21081 affects the Samsung Pass Autofill application prior to version 5.2.10.x.
How do I fix CVE-2026-21081?
To fix CVE-2026-21081, update the Samsung Pass Autofill application to version 5.2.10.x or later.
Who can exploit CVE-2026-21081?
CVE-2026-21081 can be exploited by local attackers who require user interaction to access sensitive information.
What type of vulnerability is CVE-2026-21081?
CVE-2026-21081 is classified as an improper export vulnerability of application components.