CVE-2025-21076 - Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account

Back Back to CVE browser

MEDIUM

Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account

Published Nov 5, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.14%

Description

Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-37798
Advisory
https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-37798		Advisory
https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11		Vendor Advisory