CoreCVE
Back

HIGH

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege

Published Nov 5, 2025

Description

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (0)

No CWE recorded.

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner SamsungMobile
Published Nov 5, 2025
Updated Nov 5, 2025
Reserved Nov 6, 2024
Link CVE-2025-21079
CISA Vulnrichment
Updated Nov 5, 2025
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2025-21079
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-21079