CVE-2025-58487: Samsung Account

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege.

Affected products

• Samsung Account: before 15.5.01.1 (fixed in 15.5.01.1)

Published 2025-12-02. Last modified 2026-06-17.