CVE-2025-21076
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.
Risk Assessment
A local attacker could access a user's Samsung Account data, potentially leading to privacy breaches. However, user interaction is required, which limits attack vectors.
Recommendation
Update the Samsung Account app to version 15.5.00.18 or later. Inform users about the risk and advise caution when interacting with the app.
Other vulnerabilities in Samsung Account
See all- CVE-2026-21127Medium
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
- CVE-2025-58486Medium
Improper input validation in Samsung Account prior to version 15.5.01.1 allows a local attacker to execute arbitrary script.
Original NVD description (English source)
Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS