CVE-2023-30729

CVE-2023-30729 affects Samsung Email prior to version 6.1.82.0 . The root cause is improper certificate validation , enabling a remote attacker to intercept network traffic and access sensitive information. Affected software: Samsung Email versions before 6.1.82.0. Remediation: update to version ...

CVE-2021-25376

CVE-2021-25376 affects Samsung Email prior to version 6.1.41.0 due to an improper synchronization logic, which can cause leakage of messages in plaintext in certain mailboxes when STARTTLS negotiation fails. The vulnerability is described in multiple sources as a leak in plaintext under a failed ...

CVE-2025-20894

CVE-2025-20894 concerns Samsung Email. multiple sources confirm an improper access control flaw in Samsung Email prior to version 6.1.97.1, enabling physical attackers to access data across multiple user profiles. The PT-Security advisory explicitly lists affected versions and the fix path: updat...

CVE-2024-20867

Samsung Email prior to 6.1.91.14 has an improper privilege management vulnerability (CVE-2024-20867) that allows local attackers to access sensitive information. Affected component: Samsung Email; root cause: privilege mismanagement enabling unauthorized local access. Remediation: update to versi...

CVE-2024-20807

CVE-2024-20807 describes an implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16. The issue enables a local attacker to obtain sensitive information due to improper handling of implicit intents within the Samsung Email app. The vulnerability is documented across mul...

CVE-2021-25375

Samsung Email prior to version 6.1.41.0 is affected by a information-disclosure flaw where an attacker using a malicious attachment can access attachments from other emails by exploiting a predictable index. This affects Samsung Email clients and can be triggered when the user opens the malicious...

CVE-2023-42553

Samsung Email is affected by an improper authorization verification vulnerability in versions before 6.1.90.4 that could allow reading of sandboxed email data. The CVE-2023-42553 entry cites a primary impact (CONF/low) with CVSS v3.1 base score 5.3, and a CNA note of a local vector with CVSS 4.0....

CVE-2024-34636

CVE-2024-34636 concerns Samsung Email prior to version 6.1.94.2, where use of implicit intents for sensitive communication may allow local attackers to obtain sensitive information. Connected sources (Red Hat advisory RH:CVE-2024-34636 and other vulnerability records) corroborate the same descrip...

CVE-2025-21077

Samsung Email CVE-2025-21077 affects Samsung Email versions prior to 6.2.06.0. The root cause is improper input validation, allowing a local attacker to launch arbitrary activity with Samsung Email privileges. Documented impact is limited to local privilege escalation; no remote code execution is...