CVE-2025-21079
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URLs and launch arbitrary activities with Samsung Members privileges. User interaction is required to trigger this vulnerability.
Risk Assessment
An attacker may trick a user into interaction and abuse the app's privileges to launch unwanted actions or open malicious URLs.
Recommendation
Update Samsung Members to version 5.5.01.3 or later and be cautious with unexpected in-app prompts.
Other vulnerabilities in Samsung Members
Original NVD description (English source)
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS