CVE-2026-21020

HIGH CVSS 7.8 View on NVD ↗

Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

samsung/android

Published: May 13, 2026 06:16 UTC Modified: May 13, 2026 17:30 UTC