Threat database

415 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.7	EPSS 0.1%	CVE-2025-21044Samsung Mobile Devices · Out-of-bounds Write Medium5.7EPSS 0.1%2025-10-10CVE Database V5CVE-2025-21044 Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+9	CVE Database V5	2025-10-10
Medium	6.6	EPSS 0.2%	CVE-2025-21056Retail Mode · Improper Input Validation Medium6.6EPSS 0.2%2025-09-25CVE Database V5CVE-2025-21056 Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices. EPSS 0.2%Vulnerability Samsung Mobile #cwe-20 Germany+7	CVE Database V5	2025-09-25
High	8.8	KEVEPSS 2.2%	CVE-2025-21043Samsung Mobile Devices · Out-of-bounds Write High8.8KEVEPSS 2.2%2025-09-12CVE Database V5CVE-2025-21043 Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. KEVEPSS 2.2%Vulnerability Samsung Mobile #cwe-787 United States+9	CVE Database V5	2025-09-12
High	8.8	KEVEPSS 35%	CVE-2025-21042Samsung Mobile Devices · Out-of-bounds Write High8.8KEVEPSS 35%2025-09-12CVE Database V5CVE-2025-21042 Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. KEVEPSS 35%Vulnerability Samsung Mobile #cwe-787	CVE Database V5	2025-09-12
Medium	6.2	EPSS 0.1%	CVE-2025-21041Secure Folder · Insecure Storage of Sensitive Information Medium6.2EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21041 Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-922 Germany+9	CVE Database V5	2025-09-03
Medium	5.1	EPSS 0.1%	CVE-2025-21040S Assistant · Improper Verification of Intent by Broadcast Receiver Medium5.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21040 Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-925 Germany+7	CVE Database V5	2025-09-03
Medium	5.1	EPSS 0.1%	CVE-2025-21039S Assistant · Improper Verification of Intent by Broadcast Receiver Medium5.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21039 Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-925 Germany+8	CVE Database V5	2025-09-03
Medium	5.1	EPSS 0.1%	CVE-2025-21038S Assistant · Improper Verification of Intent by Broadcast Receiver Medium5.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21038 Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-925 Germany+7	CVE Database V5	2025-09-03
Medium	4.1	EPSS 0.1%	CVE-2025-21037SamsungNotes · Improper Access Control Medium4.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21037 Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+7	CVE Database V5	2025-09-03
Medium	5.0	EPSS 0.1%	CVE-2025-21036Samsung Notes · Use of Implicit Intent for Sensitive Communication Medium5.0EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21036 Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-927 Germany+9	CVE Database V5	2025-09-03
Medium	4.6	EPSS 0.2%	CVE-2025-21035Samsung Calendar · Improper Access Control Medium4.6EPSS 0.2%2025-09-03CVE Database V5CVE-2025-21035 Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-09-03
Medium	4.0	EPSS 0.1%	CVE-2025-21034Samsung Mobile Devices · Out-of-bounds Write Medium4.0EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21034 Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 Germany+7	CVE Database V5	2025-09-03
Medium	4.0	EPSS 0.1%	CVE-2025-21033Samsung Mobile Devices · Improper Access Control Medium4.0EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21033 Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-09-03
Medium	5.9	EPSS 0.2%	CVE-2025-21032Samsung Mobile Devices · Improper Access Control Medium5.9EPSS 0.2%2025-09-03CVE Database V5CVE-2025-21032 Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+7	CVE Database V5	2025-09-03
Medium	6.8	EPSS 0.1%	CVE-2025-21031Samsung Mobile Devices · Improper Access Control Medium6.8EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21031 Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-09-03
Medium	4.3	EPSS 0.2%	CVE-2025-21030Samsung Mobile Devices · Improper Handling of Insufficient Permissions Medium4.3EPSS 0.2%2025-09-03CVE Database V5CVE-2025-21030 Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows local attackers to execute arbitrary application in the background. EPSS 0.2%Vulnerability Samsung Mobile #cwe-280 Germany+7	CVE Database V5	2025-09-03
Medium	4.0	EPSS 0.1%	CVE-2025-21029Samsung Mobile Devices · Improper handling of insufficient permission Medium4.0EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21029 Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display. EPSS 0.1%Vulnerability Samsung Mobile #cwe-280 Germany+9	CVE Database V5	2025-09-03
Medium	5.5	EPSS 0.1%	CVE-2025-21028Samsung Mobile Devices · Improper Privilege Management Medium5.5EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21028 Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items. EPSS 0.1%Vulnerability Samsung Mobile #cwe-269 Germany+7	CVE Database V5	2025-09-03
Medium	5.1	EPSS 0.1%	CVE-2025-21027Samsung Mobile Devices · Improper Verification of Intent by Broadcast Receiver Medium5.1EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21027 Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM. EPSS 0.1%Vulnerability Samsung Mobile #cwe-925 Germany+9	CVE Database V5	2025-09-03
Medium	4.0	EPSS 0.1%	CVE-2025-21026Samsung Mobile Devices · Improper handling of insufficient permission Medium4.0EPSS 0.1%2025-09-03CVE Database V5CVE-2025-21026 Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call. EPSS 0.1%Vulnerability Samsung Mobile #cwe-280 Germany+9	CVE Database V5	2025-09-03

Showing 301–320 of 415 results