CVE-2026-21108

6.9 mediumEPSS 0.1%

Medium (6.9) in samsung bixby. EPSS 0.1% chance of exploitation in the next 30 days.

Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.

Severity

6.9 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-926
Published: 2026-09-09
Modified: 2026-09-23
Record from: the NVD, synced 2026-10-19