[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUWNQCzWpo7mqOyevBUAqfGYYj7Anc_1QNy9zrN8V7nI":3,"g5a-risk:CVE-2021-25376":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":26,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":66,"weaknesses":67,"weaknessesCount":66,"isActivelyExploited":81,"cisaInfo":26,"otxData":26,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":117,"notableEvents":118},"CVE-2021-25376","What is CVE-2021-25376?","An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is failed.","An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is ...","2021-04-09T18:15:15.24","2021-04-23T13:29:01.2",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":38,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":28},"mobile.security@samsung.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":34,"AttackComplexity":35,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","ADJACENT_NETWORK","HIGH",3.1,1.6,[39],{"Source":17,"Type":18,"CVSSData":40,"BaseSeverity":25,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":41,"VectorString":42,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":43,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":44,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,10,2.9,0.00786,[47,47,47,47,47,47,47],"Medium",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"samsung","email","*","cpe:2.3:a:samsung:email:*:*:*:*:*:*:*:*",1,[58,63],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fsecurity.samsungmobile.com\u002F","Samsungmobile",[62],"Vendor Advisory",{"url":64,"source":60,"tags":65},"https:\u002F\u002Fsecurity.samsungmobile.com\u002FserviceWeb.smsb",[62],2,[68,76],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-662","Improper Synchronization","The product utilizes multiple threads or processes to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.","Synchronization refers to a variety of behaviors and mechanisms that allow two or more independently-operating processes or threads to ensure that they operate on shared resources in predictable ways that do not interfere with each other.  Some shared resource operations cannot be executed atomically; that is, multiple steps must be guaranteed to execute sequentially, without any interference by other processes.  Synchronization mechanisms vary widely, but they may include locking, mutexes, and semaphores.  When a multi-step operation on a shared resource cannot be guaranteed to execute independent of interference, then the resulting behavior can be unpredictable. Improper synchronization could lead to data or memory corruption, denial of service, etc.","Draft","Class","Simple",{"id":77,"name":78,"description":79,"extendedDescription":80,"status":73,"abstraction":74,"structure":75},"CWE-200","Exposure of Sensitive Information to an Unauthorized Actor","The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","There are many different kinds of mistakes that introduce information exposures. The severity of the error can range widely, depending on the context in which the product operates, the type of sensitive information that is revealed, and the benefits it may provide to an attacker.  Some kinds of sensitive information include:\nInformation might be sensitive to different parties, each of which may have their own expectations for whether the information should be protected.  These parties include:\nInformation exposures can occur in different ways:\nIt is common practice to describe any loss of confidentiality as an \"information exposure,\" but this can lead to overuse of CWE-200 in CWE mapping. From the CWE perspective, loss of confidentiality is a technical impact that can arise from dozens of different weaknesses, such as insecure file permissions or out-of-bounds read.  CWE-200 and its lower-level descendants are intended to cover the mistakes that occur in behaviors that explicitly manage, store, transfer, or cleanse sensitive information.",false,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2021-25376? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-25376, a medium severity cyber security vulnerability from 2021. An improper synchronization logic in Samsung Email prior ...","CVE-2021-25376, CVE-2021-25376 vulnerability, CVE-2021-25376 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, samsung security, email vulnerability","\u002Fwhat-is\u002Fcve-2021-25376",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-25376","Cybersecurity","CVE-2021-25376, CVE-2021-25376 vulnerability, CVE-2021-25376 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":26,"Negate":26,"Nodes":110},[111],{"Operator":112,"Negate":26,"CPEMatch":113},"OR",[114],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":116,"VersionEndIncluding":26},"C8212599-7A71-4DFE-971B-0FF5000FBD0B","6.1.41.0",[],[],{"lastModified":11,"cacheTime":120,"version":41},1793230619968,{"score":122,"band":123,"action":124,"scoredAt":125},22,"Low","Monitor","2026-10-28T06:50:41.108554+00:00"]