CVE-2025-20982

Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2025-21009

Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption...

CVE-2025-21005

Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information...

CVE-2025-21005

The CVE-2025-21005 entry concerns the isemtelephony component, with the issue described as improper access control. Affected software isemtelephony is prior to Android 15, where local attackers could access sensitive information due to insufficient access restrictions. The PT Security advisory (P...

CVE-2025-21004

The CVE-2025-21004 entry concerns Galaxy Watch System UI where improper verification of intents in the broadcast receiver enables a local attacker to power off the device. Affected scope is Galaxy Watch devices running firmware prior to the SMR Jul-2025 Release 1. The underlying issue is insuffic...

CVE-2025-20999

The CVE-2025-20999 issue affects Samsung Galaxy Tablet devices (prior to SMR Jul-2025 Release 1) and is due to improper authorization when accessing saved Wi‑Fi passwords, enabling a secondary user to retrieve the owner’s credentials. The root cause is insufficient access control for saved Wi‑Fi ...

CVE-2025-20982

The issue (CVE-2025-20982) affects KnoxVault trustlet on Samsung devices, caused by an out-of-bounds write when setting the auth secret. It applies to KnoxVault trustlet versions prior to SMR Jul-2025 Release 1 and enables local privileged attackers to write memory out-of-bounds. Mitigation: upda...

CVE-2025-50109

creationtimestamp| type| source ---|---|--- 2025-07-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01 2025-07-08 20:03:20+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lti3tu3ut324...

CVE-2025-7169

creationtimestamp| type| source ---|---|--- 2025-07-08 09:27:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgycjr7g32e...

CVE-2025-38236

A use-after-free flaw was found in the Linux kernel's AFUNIX sockets functionality in how a user triggers the issue by sending and receiving a crafted sequence of OOB socket messages. This vulnerability allows a local attacker to escalate privileges, especially if the kernel address layout...

CVE-2025-24006

A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root...

CVE-2025-41668

creationtimestamp| type| source ---|---|--- 2025-07-08 07:11:01+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816362788303261 2025-07-08 07:11:10+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqovnswf72 2025-07-08 09:32:32+00:00| seen|...

CVE-2018-18384

creationtimestamp| type| source ---|---|--- 2025-07-08 07:10:41+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115...

CVE-2018-20969

creationtimestamp| type| source ---|---|--- 2025-07-08 07:10:39+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2025-07-08 07:10:49+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqoa3tmza2...

CVE-2025-7346

CVE-2025-7346 affects pyload’s web UI (cnl_blueprint.py) where a local_check middleware validates requests based on REMOTE_ADDR and Host header. An unauthenticated attacker can bypass localhost restrictions by setting Host to 127.0.0.1:9666 or localhost variants, enabling actions like adding arbi...

CVE-2025-20691

creationtimestamp| type| source ---|---|--- 2025-07-08 06:57:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgpxae3u62b...

CVE-2025-42969

creationtimestamp| type| source ---|---|--- 2025-07-08 03:20:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgdsnyxdz2e...

CVE-2025-7307

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-554/...

CVE-2025-7298

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-542/...

CVE-2025-7295

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-544/ 2025-07-22 03:54:23+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:38+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...