PULSE
ES
FEED
ransomqilin reclama a NuVista Federal Credit Union · US · Financial Servicesransomqilin reclama a Hawaii Law Enforcement Fedral Credit Union · US · Financial Servicesransomn0n reclama a Company #111 · AEransomeverest reclama a OR Technology · Technologyransomeverest reclama a Burris & MacOmber · Professional Servicesransomeverest reclama a Energy Storage Terminal in Singapore · SG · Energy & Utilitiesransomeverest reclama a Point Robotics · Technologyransomeverest reclama a Natuzzi · IT · Manufacturingransomeverest reclama a TECNA ICE · IT · Manufacturingransomeverest reclama a MediSolution · Healthcareransomeverest reclama a SleepEx LabRetriever · Healthcareransomcrypto24 reclama a Antah HealthCare Group · MY · Healthcareransomcrypto24 reclama a DATEM, Inc. · PH · Technologyransomwhitearmor reclama a gamblinglore · Retail & E-Commerceransomqilin reclama a NuVista Federal Credit Union · US · Financial Servicesransomqilin reclama a Hawaii Law Enforcement Fedral Credit Union · US · Financial Servicesransomn0n reclama a Company #111 · AEransomeverest reclama a OR Technology · Technologyransomeverest reclama a Burris & MacOmber · Professional Servicesransomeverest reclama a Energy Storage Terminal in Singapore · SG · Energy & Utilitiesransomeverest reclama a Point Robotics · Technologyransomeverest reclama a Natuzzi · IT · Manufacturingransomeverest reclama a TECNA ICE · IT · Manufacturingransomeverest reclama a MediSolution · Healthcareransomeverest reclama a SleepEx LabRetriever · Healthcareransomcrypto24 reclama a Antah HealthCare Group · MY · Healthcareransomcrypto24 reclama a DATEM, Inc. · PH · Technologyransomwhitearmor reclama a gamblinglore · Retail & E-Commerce
← All CVEs
CVE WatchOct 18, 2026

CVE-2025-21076

Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access

CVSS

5.5

Medium

EPSS

0.1%

p3

KEV

—

Exploit Today

1

0-100

Published: Nov 5, 2025 · Last modified: Oct 18, 2026

EPSS · 30d
0.1%EPSS · 30 days0.1%
2026-09-282026-10-26
Technical description

Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability.

Official references
Related CVEs

No related CVEs by CWE or product.