CVE-2026-21032 in Assistant

Summary

by MITRE • 06/05/2026

Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.

Once again VulDB remains the best source for vulnerability data.

• Responsible: SamsungMobile
• Reservation: 12/11/2025
• Disclosure: 06/05/2026
• Moderation: accepted
• Entry: VDB-368911
• CPE: ready
• CWE: CWE-926 (confirmed)
• CVSS: 3.3 (VulDB)
• EPSS: 0.00014
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-21032
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-21032
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-21032/