CVE-2025-21059
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
Risk Assessment
A local attacker could access the user's health data, potentially compromising the confidentiality of sensitive information.
Recommendation
Update Samsung Health to version 6.30.5.105 or later.
Other vulnerabilities in Samsung Health
See all- CVE-2026-21082Medium
Relative path traversal vulnerability in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21077Medium
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21076Medium
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21056Medium
An improper authorization vulnerability in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
Original NVD description (English source)
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS