CVE-2021-25376

—

CVSS 3.1

5.3 medium

EPSS

<1%p54

Published

Apr 9, 2021 (Apr 9, 2021)

Modified

Jun 17, 2026

Description

An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is failed.

Vendors: samsung
Products: email
Weakness: CWE-200, CWE-662
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.