Threat database

415 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	4.0	EPSS 0.1%	CVE-2025-21066Samsung Notes · Out-of-bounds Read Medium4.0EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21066 Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-125 Germany+6	CVE Database V5	2025-10-10
Medium	6.6	EPSS 0.2%	CVE-2025-21065Retail Mode · Improper Input Validation Medium6.6EPSS 0.2%2025-10-10CVE Database V5CVE-2025-21065 Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices. EPSS 0.2%Vulnerability Samsung Mobile #cwe-20 Germany+6	CVE Database V5	2025-10-10
High	8.8	EPSS 0.3%	CVE-2025-21064Smart Switch · Improper Authentication High8.8EPSS 0.3%2025-10-10CVE Database V5CVE-2025-21064 Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data. EPSS 0.3%Vulnerability Samsung Mobile #cwe-287 United States+9	CVE Database V5	2025-10-10
Medium	4.6	EPSS 0.2%	CVE-2025-21063Samsung Voice Recorder · Improper Access Control Medium4.6EPSS 0.2%2025-10-10CVE Database V5CVE-2025-21063 Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-10-10
High	7.8	EPSS 0.1%	CVE-2025-21062Smart Switch · Use of a Broken or Risky Cryptographic Algorithm High7.8EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21062 Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-327 South Korea+9	CVE Database V5	2025-10-10
High	7.1	EPSS 0.1%	CVE-2025-21061Smart Switch · Cleartext Storage of Sensitive Information High7.1EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21061 Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-312 Germany+6	CVE Database V5	2025-10-10
Medium	5.5	EPSS 0.1%	CVE-2025-21060Smart Switch · Cleartext Storage of Sensitive Information Medium5.5EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21060 Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-312 Germany+7	CVE Database V5	2025-10-10
Medium	6.2	EPSS 0.1%	CVE-2025-21059Samsung Health · Improper Authorization Medium6.2EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21059 Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health. EPSS 0.1%Vulnerability Samsung Mobile #cwe-285 Germany+6	CVE Database V5	2025-10-10
High	7.3	EPSS 0.1%	CVE-2025-21058Routines · Improper Access Control High7.3EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21058 Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-10-10
Medium	4.0	EPSS 0.1%	CVE-2025-21057Samsung Notes · Use of Implicit Intent for Sensitive Communication Medium4.0EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21057 Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes. EPSS 0.1%Vulnerability Samsung Mobile #cwe-927 Germany+6	CVE Database V5	2025-10-10
Medium	4.3	EPSS 0.3%	CVE-2025-21055Samsung Mobile Devices · Out-of-bounds Read Medium4.3EPSS 0.3%2025-10-10CVE Database V5CVE-2025-21055 Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory. EPSS 0.3%Vulnerability Samsung Mobile #cwe-125 Germany+6	CVE Database V5	2025-10-10
Medium	4.0	EPSS 0.1%	CVE-2025-21054Samsung Mobile Devices · Out-of-bounds Read Medium4.0EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21054 Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-125 Germany+6	CVE Database V5	2025-10-10
Medium	4.0	EPSS 0.1%	CVE-2025-21053Samsung Mobile Devices · Out-of-bounds Write Medium4.0EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21053 Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 Germany+5	CVE Database V5	2025-10-10
Medium	4.0	EPSS 0.1%	CVE-2025-21052Samsung Mobile Devices · Out-of-bounds Write Medium4.0EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21052 Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 Germany+6	CVE Database V5	2025-10-10
Medium	4.0	EPSS 0.1%	CVE-2025-21051Samsung Mobile Devices · Out-of-bounds Write Medium4.0EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21051 Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 Germany+6	CVE Database V5	2025-10-10
Medium	5.5	EPSS 0.1%	CVE-2025-21049Samsung Mobile Devices · Improper Access Control Medium5.5EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21049 Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-10-10
Medium	6.7	EPSS 0.2%	CVE-2025-21048Samsung Mobile Devices · Relative Path Traversal Medium6.7EPSS 0.2%2025-10-10CVE Database V5CVE-2025-21048 Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code. EPSS 0.2%Vulnerability Samsung Mobile #cwe-23 United States+9	CVE Database V5	2025-10-10
Medium	5.2	EPSS 0.2%	CVE-2025-21047Samsung Mobile Devices · Improper Access Control Medium5.2EPSS 0.2%2025-10-10CVE Database V5CVE-2025-21047 Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-10-10
Low	2.4	EPSS 0.2%	CVE-2025-21046Samsung Mobile Devices · Improper Access Control Low2.4EPSS 0.2%2025-10-10CVE Database V5CVE-2025-21046 Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-10-10
Medium	4.0	EPSS 0.1%	CVE-2025-21045Samsung Mobile Devices · Insecure Storage of Sensitive Information Medium4.0EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21045 Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-922 Germany+6	CVE Database V5	2025-10-10

Showing 281–300 of 415 results