Threat database

279 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.5	EPSS 0.1%	CVE-2025-21049Samsung Mobile Devices · Improper Access Control Medium5.5EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21049 Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-10-10
Medium	6.7	EPSS 0.2%	CVE-2025-21048Samsung Mobile Devices · Relative Path Traversal Medium6.7EPSS 0.2%2025-10-10CVE Database V5CVE-2025-21048 Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code. EPSS 0.2%Vulnerability Samsung Mobile #cwe-23 United States+9	CVE Database V5	2025-10-10
Medium	5.2	EPSS 0.2%	CVE-2025-21047Samsung Mobile Devices · Improper Access Control Medium5.2EPSS 0.2%2025-10-10CVE Database V5CVE-2025-21047 Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-10-10
Low	2.4	EPSS 0.2%	CVE-2025-21046Samsung Mobile Devices · Improper Access Control Low2.4EPSS 0.2%2025-10-10CVE Database V5CVE-2025-21046 Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-10-10
Medium	4.0	EPSS 0.1%	CVE-2025-21045Samsung Mobile Devices · Insecure Storage of Sensitive Information Medium4.0EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21045 Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-922 Germany+6	CVE Database V5	2025-10-10
Medium	5.7	EPSS 0.1%	CVE-2025-21044Samsung Mobile Devices · Out-of-bounds Write Medium5.7EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21044 Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+9	CVE Database V5	2025-10-10
Medium	6.6	EPSS 0.2%	CVE-2025-21056Retail Mode · Improper Input Validation Medium6.6EPSS 0.2%2025-09-25CVE Database V5CVE-2025-21056 Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices. EPSS 0.2%Vulnerability Samsung Mobile #cwe-20 Germany+7	CVE Database V5	2025-09-25
HighExploited in the wild	8.8	KEVEPSS 2.2%	CVE-2025-21043Samsung Mobile Devices · Out-of-bounds Write High8.8KEVEPSS 2.2%2025-09-12CVE Database V5CVE-2025-21043 Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. KEVEPSS 2.2%Vulnerability Samsung Mobile #cwe-787 United States+9	CVE Database V5	2025-09-12
HighExploited in the wild	8.8	KEVEPSS 35%	CVE-2025-21042Samsung Mobile Devices · Out-of-bounds Write High8.8KEVEPSS 35%2025-09-12CVE Database V5CVE-2025-21042 Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. KEVEPSS 35%Vulnerability Samsung Mobile #cwe-787	CVE Database V5	2025-09-12
Medium	6.2	EPSS 0.1%	CVE-2025-21041Secure Folder · Insecure Storage of Sensitive Information Medium6.2EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21041 Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-922 Germany+9	CVE Database V5	2025-09-03
Medium	5.1	EPSS 0.1%	CVE-2025-21040S Assistant · Improper Verification of Intent by Broadcast Receiver Medium5.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21040 Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-925 Germany+7	CVE Database V5	2025-09-03
Medium	5.1	EPSS 0.1%	CVE-2025-21039S Assistant · Improper Verification of Intent by Broadcast Receiver Medium5.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21039 Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-925 Germany+8	CVE Database V5	2025-09-03
Medium	5.1	EPSS 0.1%	CVE-2025-21038S Assistant · Improper Verification of Intent by Broadcast Receiver Medium5.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21038 Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-925 Germany+7	CVE Database V5	2025-09-03
Medium	4.1	EPSS 0.1%	CVE-2025-21037SamsungNotes · Improper Access Control Medium4.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21037 Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+7	CVE Database V5	2025-09-03
Medium	5.0	EPSS 0.1%	CVE-2025-21036Samsung Notes · Use of Implicit Intent for Sensitive Communication Medium5.0EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21036 Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-927 Germany+9	CVE Database V5	2025-09-03
Medium	4.6	EPSS 0.2%	CVE-2025-21035Samsung Calendar · Improper Access Control Medium4.6EPSS 0.2%2025-09-03CVE Database V5CVE-2025-21035 Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-09-03
Medium	4.0	EPSS 0.1%	CVE-2025-21034Samsung Mobile Devices · Out-of-bounds Write Medium4.0EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21034 Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 Germany+7	CVE Database V5	2025-09-03
Medium	4.0	EPSS 0.1%	CVE-2025-21033Samsung Mobile Devices · Improper Access Control Medium4.0EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21033 Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-09-03
Medium	5.9	EPSS 0.2%	CVE-2025-21032Samsung Mobile Devices · Improper Access Control Medium5.9EPSS 0.2%2025-09-03CVE Database V5CVE-2025-21032 Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+7	CVE Database V5	2025-09-03
Medium	6.8	EPSS 0.1%	CVE-2025-21031Samsung Mobile Devices · Improper Access Control Medium6.8EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21031 Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-09-03

Showing 201–220 of 279 results