CVE-2025-21076

Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.

CVSS 3.1

5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-25)

Published

2025-11-05

Modified

2026-10-18

Record from

the NVD, synced 2026-10-19

Affected

• samsung:account

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11

Check your stackJSON