Threat database

279 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.2%	CVE-2025-21030Samsung Mobile Devices · Improper Handling of Insufficient Permissions Medium4.3EPSS 0.2%2025-09-03CVE Database V5CVE-2025-21030 Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows local attackers to execute arbitrary application in the background. EPSS 0.2%Vulnerability Samsung Mobile #cwe-280 Germany+7	CVE Database V5	2025-09-03
Medium	4.0	EPSS 0.1%	CVE-2025-21029Samsung Mobile Devices · Improper handling of insufficient permission Medium4.0EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21029 Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display. EPSS 0.1%Vulnerability Samsung Mobile #cwe-280 Germany+9	CVE Database V5	2025-09-03
Medium	5.5	EPSS 0.1%	CVE-2025-21028Samsung Mobile Devices · Improper Privilege Management Medium5.5EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21028 Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items. EPSS 0.1%Vulnerability Samsung Mobile #cwe-269 Germany+7	CVE Database V5	2025-09-03
Medium	5.1	EPSS 0.1%	CVE-2025-21027Samsung Mobile Devices · Improper Verification of Intent by Broadcast Receiver Medium5.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21027 Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM. EPSS 0.1%Vulnerability Samsung Mobile #cwe-925 Germany+9	CVE Database V5	2025-09-03
Medium	4.0	EPSS 0.1%	CVE-2025-21026Samsung Mobile Devices · Improper handling of insufficient permission Medium4.0EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21026 Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call. EPSS 0.1%Vulnerability Samsung Mobile #cwe-280 Germany+9	CVE Database V5	2025-09-03
Medium	5.1	EPSS 0.1%	CVE-2025-21025Samsung Mobile Devices · Improper Access Control Medium5.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21025 Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+7	CVE Database V5	2025-09-03
Low	3.3	EPSS <0.1%	CVE-2025-21024Smart View · Use of Implicit Intent for Sensitive Communication Low3.3EPSS <0.1%2025-08-06CVE Database V5CVE-2025-21024 Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information. EPSS <0.1%Vulnerability Samsung Mobile #cwe-927 Germany+7	CVE Database V5	2025-08-06
Low	3.3	EPSS 0.1%	CVE-2025-21023WcsExtension for Galaxy Watch · Improper Access Control Low3.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21023 Improper access control in WcsExtension for Galaxy Watch prior to Android Watch 16 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+7	CVE Database V5	2025-08-06
Low	3.3	EPSS 0.1%	CVE-2025-21022Galaxy Wearable · Improper Access Control Low3.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21022 Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-08-06
Medium	5.7	EPSS 0.1%	CVE-2025-21021Blockchain Keystore · Out-of-bounds Write Medium5.7EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21021 Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+9	CVE Database V5	2025-08-06
Medium	5.7	EPSS 0.1%	CVE-2025-21020Blockchain Keystore · Out-of-bounds Write Medium5.7EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21020 Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+9	CVE Database V5	2025-08-06
Medium	5.5	EPSS 0.1%	CVE-2025-21019Samsung Health · Improper Authorization Medium5.5EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21019 Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-285 Germany+9	CVE Database V5	2025-08-06
Medium	4.4	EPSS 0.1%	CVE-2025-21018Blockchain Keystore · Out-of-bounds Read Medium4.4EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21018 Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-125 Germany+7	CVE Database V5	2025-08-06
Medium	6.3	EPSS 0.1%	CVE-2025-21017Blockchain Keystore · Out-of-bounds Write Medium6.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21017 Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+11	CVE Database V5	2025-08-06
Medium	4.3	EPSS 0.2%	CVE-2025-21016Samsung Mobile Devices · Improper Access Control Medium4.3EPSS 0.2%2025-08-06CVE Database V5CVE-2025-21016 Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allows local attackers to use the privileged APIs. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-08-06
Medium	4.0	EPSS 0.2%	CVE-2025-21015Samsung Mobile Devices · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Medium4.0EPSS 0.2%2025-08-06CVE Database V5CVE-2025-21015 Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege. EPSS 0.2%Vulnerability Samsung Mobile #cwe-22 Germany+9	CVE Database V5	2025-08-06
Medium	4.3	EPSS 0.1%	CVE-2025-21014Samsung Mobile Devices · Improper Export of Android Application Components Medium4.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21014 Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-926 Germany+7	CVE Database V5	2025-08-06
Medium	6.2	EPSS 0.1%	CVE-2025-21013Samsung Mobile Devices · Improper Access Control Medium6.2EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21013 Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to outdoor exercise and sleep time. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-08-06
Medium	5.5	EPSS 0.1%	CVE-2025-21012Samsung Mobile Devices · Improper Access Control Medium5.5EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21012 Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to modify fall detection configuration. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-08-06
Medium	5.5	EPSS 0.1%	CVE-2025-21011Samsung Mobile Devices · Improper Access Control Medium5.5EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21011 Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to motion and body sensors. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-08-06

Showing 221–240 of 279 results