CVE-2021-25403

3.3 lowEPSS 0.2%

Low (3.3) in samsung account. EPSS 0.2% chance of exploitation in the next 30 days.

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows attacker to access contacts and file provider using SettingWebView component.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2021-06-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

samsung:account

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=5
https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=5

Check your stack JSON