CVE-2025-21079HIGH 8.1EPSS p33.4%

CVE-2025-21079CVE-2025-21079

Description

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.

Scoring

CVSS 3.18.1 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS0.41% probability of exploitation · percentile 33.4% · 2026-08-03T12:00:16Z
Published2025-11-05
Last modified2025-11-07

References

  1. https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-21037
CVE
CVE-2025-20949
CVE
CVE-2026-21036
CVE
CVE-2026-21035
CVE
CVE-2025-53078
CVE
CVE-2026-21038
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.