CVE-2025-21046

LowCVSS 2.4

Published: 10/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

4th percentile - higher than 4% of all known CVEs

Summary

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access the recent app list.

Risk Assessment

A physical attacker can gain access to the recent apps list, potentially revealing sensitive information about user activity, such as used applications and potentially data stored within them.

Recommendation

Upgrade Samsung DeX to the latest version that includes the access control fix.

Other vulnerabilities in Samsung DeX

CVE-2026-21006Low
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access hidden notification contents. The vulnerability requires physical access to the device.

Original NVD description (English source)

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS