CVE-2026-21033

High · 7.1

CVSS

7.1

EPSS

0.1%

Published

Jun 5, 2026

CISA due date

—

The record

Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

Affected packages

Ecosystem	Package	Introduced	Fixed