VULNERABILITY INTELLIGENCE

CVE-2021-25439

CVSS score3.3 LOW
EPSS probability0.22%
CISA KEVNot currently listed
Published2021-07-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause arbitrary webpage loading in webview.

Weakness classification

  • mobile.security@samsung.com: CWE-284
  • nvd@nist.gov: NVD-CWE-Other

Primary references