Samsung Assistant vulnerabilities

4 CVEs affecting Samsung Assistant, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21033, published 2026-06-05.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-34661, published 2024-09-04. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this…
• CVE-2026-20993, published 2026-03-16. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information.
• CVE-2026-21033, published 2026-06-05. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.
• CVE-2026-21032, published 2026-06-05. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.