CWE-926Improper Export of Android Application Components

Abstraction: Variant · CVEs in our corpus: 90

The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.

The attacks and consequences of improperly exporting a component may depend on the exported component:

Last updated: 20 August 2026 13:14 UTC

OWASP Top 10 for Web (2025)

This weakness contributes to A08:2025 Software or Data Integrity Failures.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.AA-05
PR.PS-06
AC-3 Access Enforcement
AC-6 Least Privilege

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2025-15464`	5.9	7.5	0.0048	2026-01-08
`CVE-2025-68713`	5.9	8.0	0.0028	2026-06-15
`CVE-2021-25400`	5.7	7.8	0.0023	2021-06-11
`CVE-2025-32347`	5.5	7.8	0.0008	2025-09-04
`CVE-2023-41960`	5.2	7.1	0.0019	2023-10-25
`CVE-2025-27599`	5.1	6.5	0.0035	2025-04-18
`CVE-2026-21059`	5.1	7.1	0.0009	2026-08-10
`CVE-2021-25397`	5.0	6.8	0.0013	2021-06-11
`CVE-2024-36437`	5.0	6.5	0.0026	2025-02-03
`CVE-2026-54318`	5.0	7.1	0.0014	2026-06-23
`CVE-2021-25388`	4.9	7.1	0.0009	2021-06-11
`CVE-2026-47363`	4.7	6.3	0.0014	2026-08-07
`CVE-2026-20470`	4.6	6.2	0.0013	2026-08-03
`CVE-2026-47361`	4.6	6.4	0.0017	2026-08-07
`CVE-2026-21063`	4.5	6.1	0.0015	2026-08-10
`CVE-2021-4438`	4.2	5.3	0.0026	2024-04-07
`CVE-2025-7890`	4.2	5.3	0.0029	2025-07-20
`CVE-2025-7891`	4.2	5.3	0.0031	2025-07-20
`CVE-2025-7892`	4.2	5.3	0.0028	2025-07-20
`CVE-2025-7893`	4.2	5.3	0.0028	2025-07-20
`CVE-2025-9134`	4.2	5.3	0.0026	2025-08-19
`CVE-2025-9135`	4.2	5.3	0.0028	2025-08-19
`CVE-2025-9674`	4.2	5.3	0.0027	2025-08-29
`CVE-2025-9675`	4.2	5.3	0.0027	2025-08-29
`CVE-2025-9676`	4.2	5.3	0.0027	2025-08-29