CVE-2021-25505: Samsung Pass

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked.

Affected products

• Samsung Samsung Pass: before 3.0.02.4 (fixed in 3.0.02.4)

Published 2021-11-05. Last modified 2026-06-17.