CVE-2025-58486
MediumCVSS 4.0Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Improper input validation in Samsung Account prior to version 15.5.01.1 allows a local attacker to execute arbitrary script.
Risk Assessment
A local attacker can execute arbitrary script in the context of the Samsung Account application, potentially leading to unauthorized access to data or device functions. However, this requires physical access to the device.
Recommendation
Update the Samsung Account app to version 15.5.01.1 or later. It is also recommended to regularly update the system and apps and avoid installing software from unknown sources.
Other vulnerabilities in Samsung Account
See all- CVE-2026-21127Medium
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
- CVE-2025-21076Medium
Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.
Original NVD description (English source)
Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS