CVE-2021-25351: Samsung Account

Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.

Affected products

• Samsung Account: before 10.7.07 (fixed in 10.7.07); before 12.1.1.3 (fixed in 12.1.1.3)

Published 2021-03-25. Last modified 2026-06-17.