LIVE FEED
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider
MEDIUM

CVE-2025-58487

Samsung Account vulnerability

Samsung·Account

4.0/ 10
CVSS 3.1
Medium severity
0.16%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 6% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
Published
Dec 2, 2025
Updated
Dec 2, 2025
First covered
Aug 5, 2026
Latest story
3 months ago

Summary

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege.

Attack profile

Attack vectorLocal
ComplexityLow
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityNone
IntegrityNone
AvailabilityLow
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

  • Samsung Account

References

CVE.org recordcve.org NVD entrynvd.nist.gov Advisorysecurity.samsungmobile.com
Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed