Samsung Recents App Improper Exception Handling Vulnerability Allowing App Pinning Bypass

A vulnerability exists in the Recents app on Samsung devices running Android 14, 15, or 16, prior to the April 2026 Security Maintenance Release. This vulnerability allows a physical attacker to bypass App Pinning due to improper checks for exceptional conditions. The issue has been privately disclosed and is part of a broader security update that addresses several vulnerabilities across different Samsung applications and features.

Impact

Exploitation of this vulnerability allows physical attackers to bypass App Pinning, potentially leading to unauthorized access to applications or information that should be pinned or restricted.

Remediation

The vulnerability has been patched in the Samsung April 2026 Security Maintenance Release. Users should update to this version to address the issue.