AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SamsungCVE-2026-21081

SamsungPassAutofill: information disclosure

Samsung

CVE-2026-21081 · Published Aug 10, 2026 · updated Aug 18, 2026

Medium5.1
No fix yet
Samsung advisory

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-926

More Samsung advisories

All Samsung
Medium 6.8Aug 10Samsung Smart Switch: improper input validationCVE-2026-21083no fix yetMedium 6.9Aug 10Samsung SmartThings: improper access controlCVE-2026-21084no fix yetMedium 5.3Aug 10Samsung My Galaxy: improper authorizationCVE-2026-21075no fix yetMedium 6.9Aug 10Samsung Health: improper authorizationCVE-2026-21076no fix yetMedium 6.9Aug 10Samsung Health: improper authorizationCVE-2026-21077no fix yetMedium 4.7Aug 10Samsung: insufficient authenticity checkCVE-2026-21078no fix yet