CVE-2025-21077

LowCVSS 3.3

Published: 05/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

1th percentile - higher than 1% of all known CVEs

Summary

Samsung Email prior to version 6.2.06.0 has improper input validation. It allows local attackers to launch arbitrary activities with Samsung Email privileges.

Risk Assessment

A local attacker could leverage Samsung Email privileges to launch unintended activities, potentially leading to unauthorized actions within the app context. The risk affects devices with the vulnerable version installed.

Recommendation

Update Samsung Email to version 6.2.06.0 or later. Restrict installation of apps from unknown sources on user devices.

Other vulnerabilities in Samsung Email

CVE-2026-21053Medium
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox.

Original NVD description (English source)

Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS