Threat database

279 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.0	EPSS 0.1%	CVE-2025-21010Samsung Mobile Devices · Improper Privilege Management Medium6.0EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21010 Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account. EPSS 0.1%Vulnerability Samsung Mobile #cwe-269 Germany+7	CVE Database V5	2025-08-06
Medium	4.0	EPSS 0.1%	CVE-2025-20990Samsung Mobile Devices · Improper Access Control Medium4.0EPSS 0.1%2025-08-06CVE Database V5CVE-2025-20990 Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-08-06
Medium	5.5	EPSS 0.1%	CVE-2025-21009libsavsvc.so · Out-of-bounds Read Medium5.5EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21009 Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. EPSS 0.1%Vulnerability Samsung Mobile #cwe-125 Germany+7	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.1%	CVE-2025-21008libsavsvc.so · Out-of-bounds Read Medium5.5EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21008 Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. EPSS 0.1%Vulnerability Samsung Mobile #cwe-125 Germany+9	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.1%	CVE-2025-21007libsavsvc.so · Out-of-bounds Write Medium5.5EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21007 Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 Germany+7	CVE Database V5	2025-07-08
High	7.0	EPSS 0.1%	CVE-2025-21006libsavsvc.so · Out-of-bounds Write High7.0EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21006 Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 Germany+7	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.1%	CVE-2025-21005isemtelephony · Improper Access Control Medium5.5EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21005 Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-07-08
Medium	6.2	EPSS <0.1%	CVE-2025-21004Samsung Mobile Devices · Improper Access Control Medium6.2EPSS <0.1%2025-07-08CVE Database V5CVE-2025-21004 Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device. EPSS <0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-07-08
Medium	4.0	EPSS 0.1%	CVE-2025-21003Samsung Mobile Devices · Insecure Storage of Sensitive Information Medium4.0EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21003 Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-922 Germany+9	CVE Database V5	2025-07-08
Medium	6.2	EPSS 0.1%	CVE-2025-21002Samsung Mobile Devices · Improper Access Control Medium6.2EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21002 Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-07-08
Medium	6.2	EPSS 0.1%	CVE-2025-21001Samsung Mobile Devices · Improper Access Control Medium6.2EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21001 Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-07-08
Medium	6.2	EPSS 0.1%	CVE-2025-21000Samsung Mobile Devices · Improper Privilege Management Medium6.2EPSS 0.1%2025-07-08CVE Database V5CVE-2025-21000 Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth. EPSS 0.1%Vulnerability Samsung Mobile #cwe-269 Germany+7	CVE Database V5	2025-07-08
Medium	4.1	EPSS 0.2%	CVE-2025-20999Samsung Mobile Devices · Improper Authorization Medium4.1EPSS 0.2%2025-07-08CVE Database V5CVE-2025-20999 Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password. EPSS 0.2%Vulnerability Samsung Mobile #cwe-285 Germany+9	CVE Database V5	2025-07-08
Medium	5.5	EPSS 0.1%	CVE-2025-20998Samsung Mobile Devices · Improper Access Control Medium5.5EPSS 0.1%2025-07-08CVE Database V5CVE-2025-20998 Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+7	CVE Database V5	2025-07-08
Medium	6.2	EPSS 0.1%	CVE-2025-20997Samsung Mobile Devices · Incorrect Default Permissions Medium6.2EPSS 0.1%2025-07-08CVE Database V5CVE-2025-20997 Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch. EPSS 0.1%Vulnerability Samsung Mobile #cwe-276 Germany+7	CVE Database V5	2025-07-08
Medium	6.4	EPSS 0.1%	CVE-2025-20983Samsung Mobile Devices · Out-of-bounds Write Medium6.4EPSS 0.1%2025-07-08CVE Database V5CVE-2025-20983 Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+12	CVE Database V5	2025-07-08
Medium	6.4	EPSS 0.1%	CVE-2025-20982Samsung Mobile Devices · Out-of-bounds Write Medium6.4EPSS 0.1%2025-07-08CVE Database V5CVE-2025-20982 Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+9	CVE Database V5	2025-07-08
Medium	5.0	EPSS 0.1%	CVE-2025-20996Smart Switch · Improper Authorization Medium5.0EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20996 Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-285 Germany+9	CVE Database V5	2025-06-04
Medium	4.9	EPSS 0.1%	CVE-2025-20995Samsung Internet · Improper handling of insufficient permission Medium4.9EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20995 Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files. EPSS 0.1%Vulnerability Samsung Mobile #cwe-280 Germany+7	CVE Database V5	2025-06-04
Medium	4.5	EPSS 0.1%	CVE-2025-20994Samsung Internet · Incorrect Default Permissions Medium4.5EPSS 0.1%2025-06-04CVE Database V5CVE-2025-20994 Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitrary files. EPSS 0.1%Vulnerability Samsung Mobile #cwe-276 Germany+9	CVE Database V5	2025-06-04

Showing 241–260 of 279 results