CVE-2025-58487

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege

Medium · published December 2, 2025

CVSS v3.1
4.0
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Published
2025-12-02T01:24Z
EPSS history
Timeline
  • 02 DEC 01:24Z
    Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege
    cvelistv5