MEDIUM🇵🇱 Wersja polska

CVE-2025-21076

CVSS 5.5v3.1pub. 2025-11-05upd. 2025-11-07

Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

  • Samsung Account

    APP
    Samsung
    < 15.5.00.18
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-20994MEDIUM6.9ten sam produkt

URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access...

CVE-2025-58487MEDIUM4.0ten sam produkt

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary...

CVE-2025-58486MEDIUM4.0ten sam produkt

Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbit...

CVE-2023-21481MEDIUM5.4ten sam produkt

Improper URL input validation vulnerability in Samsung Account application prior to version 14.1.0.0 allows re...

CVE-2024-20841MEDIUM5.1ten sam produkt

Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attack...