SamsungCVE-2026-21054

Samsung InputSharing: local attacker could access sharing data

CVE-2026-21054 · Published Jul 10, 2026

Medium6.9

No fix yet

Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Details and references

CVSS 4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from: the vendor (its own CVE record or advisory)