CVE-2025-21047

Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs...

CVE-2025-21046

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2025 Release 1 prior to Release 1, which stems from improper access control and coul...

PT-2025-41510

Name of the Vulnerable Software and Affected Versions SecSettings versions prior to SMR Oct-2025 Release 1 Description An improper access control issue exists in SecSettings. This allows local attackers to access sensitive information. User interaction is required to trigger this issue...

SAMSUNG Mobile Routines 安全漏洞

SAMSUNG Mobile Routines is a smartphone automation application from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile Routines versions prior to 4.8.7.1 and prior to 4.9.6.0, which stems from improper access control and could allow a local attacker to execute arbitrary code...

PT-2025-41508

Name of the Vulnerable Software and Affected Versions KnoxGuard versions prior to SMR Oct-2025 Release 1 Description A flaw exists in access control within KnoxGuard that could allow attackers with physical access to utilize privileged APIs. This issue impacts systems where an attacker has the...

PT-2025-41518

Name of the Vulnerable Software and Affected Versions Routines versions prior to 4.8.7.1 Routines versions prior to 4.9.6.0 Description An improper access control issue exists in Routines. This allows local attackers to potentially execute arbitrary code with SystemUI privilege. Recommendations...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Oct-2025 Release 1, which stems from improper access control and could...

SAMSUNG Voice Recorder 安全漏洞

SAMSUNG Voice Recorder is a recording application from Samsung South Korea. A security vulnerability exists in SAMSUNG Voice Recorder versions prior to 21.5.73.12 and 21.5.81.40, which stems from improper access control and could allow a physical attacker to access the recording files...

PT-2025-41523

Name of the Vulnerable Software and Affected Versions Samsung Voice Recorder versions prior to 21.5.73.12 in Android 15 and prior to 21.5.81.40 in Android 16 Description An improper access control issue exists in Samsung Voice Recorder. A physical attacker can access recording files on the lock...

Tenable Security Center < 6.7.0 (TNS-2025-21)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to 6.7.0. It is, therefore, affected by a vulnerability as referenced in the TNS-2025-21 advisory. - In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability...

VulnCheck KEV: CVE-2025-33073

Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network...

CVE-2025-36636

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope...

CVE-2025-36636 Improper Access Control

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope...

CVE-2025-36636 Improper Access Control

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope...

CVE-2025-36636

CVE-2025-36636 affects Tenable Security Center before version 6.7.0. The issue is an improper access control that allows an authenticated user to access areas outside their authorized scope, with impact described as none to confidentiality, and low integrity impact (CVSS 3.1: 4.3). Remediation is...

CVE-2025-11440

A vulnerability was determined in JhumanJ OpnForm up to 1.9.3. Impacted is an unknown function of the file /edit. Executing manipulation can lead to improper access controls. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This patch is called...

Tenable Security Center 安全漏洞

Tenable Security Center is a security center from Tenable USA. A security vulnerability exists in Tenable Security Center versions prior to 6.7.0 that stems from improper access control and could lead to unauthorized access...

PT-2025-41272

Name of the Vulnerable Software and Affected Versions Tenable Security Center versions prior to 6.7.0 Description An improper access control issue exists where an authenticated user can access areas outside of their authorized scope. This could lead to potential data exposure. Recommendations...

Security Bulletin: Improper Access Control vulnerability in Apache Commons may affect IBM Business Automation Workflow - CVE-2025-48734

Summary IBM Business Automation Workflow packages a copy of Apache commons-beanutils. CVE-2025-48734 has been reported for this library. Vulnerability Details CVEID:CVE-2025-48734 DESCRIPTION: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in...