CVE-2025-58487

Medium4.0Published on December 2, 2025

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege.

CVSS score4.0 / 10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vendorssamsung

Affected products

Vendors	Product	Versions
samsung	account	< 15.5.01.1

Vulnerabilities

Bixby Vulnerability Chain: Malicious Link Could Give Attackers Control of Galaxy Devices

A chain of vulnerabilities in Samsung software allowed a malicious link to trigger remote compromise of a device. The attack was demonstrated at Pwn2Own

Aug 6, 202607:082 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Bixby Vulnerability Chain: Malicious Link Could Give Attackers Control of Galaxy Devices