PublicCVE

CVE-2026-20993

MEDIUM4.8JSON exportCreate alert

Description

Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information.

CVSS breakdown

CVSS 4.0
Attack Vector
Local
Attack Complexity
Low
Attack Requirements
None
Privileges Required
Low
User Interaction
None
Confidentiality (Vulnerable System)
None
Integrity (Vulnerable System)
Low
Availability (Vulnerable System)
Low
Confidentiality (Subsequent System)
None
Integrity (Subsequent System)
None
Availability (Subsequent System)
None

Affected products