CVE-2025-20894

Summary

CVE-2025-20894 is a vulnerability affecting Samsung Email versions prior to 6.1.97.1. This issue involves improper access control, which allows physical attackers to bypass security restrictions and gain unauthorized access to data across various user profiles. The attacker can potentially view sensitive information, including emails and attachments, belonging to other users on the same device. This vulnerability poses a serious risk to privacy and data security, and users are advised to upgrade to the latest version of the Samsung Email app to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.