CVE-2025-21077

CVE-2025-21077

Low · published November 5, 2025

CVSS v3.1
3.3
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00116 · 1.5th percentile
Published
2025-11-05T11:15Z
Affected products (1)
ProductVersionsFixed in
samsung/email< 6.2.06.06.2.06.0
References (1)
https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11 · [email protected]
EPSS history
Timeline
  • 05 NOV 05:40Z
    Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege
    cvelistv5