CVE-2025-20995

Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files...

CVE-2025-20992

Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory...

CVE-2025-20986

Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots...

CVE-2025-20986

Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots...

CVE-2025-20996

Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability...

CVE-2025-20994

Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitrary files...

CVE-2025-20993

The CVE-2025-20993 entry concerns libsecimaging.camera.samsung.so with an out-of-bounds write, enabling local attackers to write memory past bounds. Affected: libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1. Root cause described as an out-of-bounds write; impact is local memory ma...

CVE-2025-20989

Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmackey...

CVE-2025-20988

The CVE-2025-20988 issue is a local, out-of-bounds read in the Samsung fingerprint trustlet present in Samsung Mobile devices prior to SMR May-2025 Release 1. The root cause is an out-of-bounds access in the fingerprint trustlet, allowing a locally privileged attacker to read memory outside the i...

CVE-2025-20985

Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-20984

Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch...

CVE-2024-31127

CVE-2024-31127 affects Zscaler Client Connector for macOS prior to 4.2.0.241. The root cause is improper verification of a loaded library, enabling a local attacker to escalate privileges. Impact is local privilege escalation with HIGH confidentiality/integrity impact and low availability impact ...

PT-2025-23756

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 28.0.0.59 Description The issue is related to the improper handling of insufficient permission in the ClientProvider component of Samsung Internet. This allows local attackers to read and write arbitrary file...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in versions prior to SAMSUNG SMR Feb-2025 Release 1, which originates from an out-of-bounds read and could lead to a local...

PT-2025-23753 · Samsung · Libsecimaging.Camera.Samsung.So

Name of the Vulnerable Software and Affected Versions: libsecimaging.camera.samsung.so versions prior to SMR Feb-2025 Release 1 Description: The issue is an out-of-bound read that allows local attackers to read out-of-bounds memory. This can be exploited by local attackers. Recommendations: For...

Samsung Smart Switch 安全漏洞

SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in Samsung Smart Switch versions prior to 3.7.64.10, which stems from improper authorization and could allow a local attacker to read data with Smart Switch privileges...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in versions prior to SAMSUNG SMR Jun-2025 Release 1, which stems from improper export of Android application components and...

PT-2025-23825 · Cisco · Cisco Unified Ccx

Name of the Vulnerable Software and Affected Versions: Cisco Unified CCX affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, local attacker to execute arbitrary code on an affected device. The issue is due to improper...

New Linux Vulnerabilities

They're interesting: Tracked as CVE-2025-5054 and CVE-2025-4598, both vulnerabilities are race condition bugs that could enable a local attacker to obtain access to access sensitive information. Tools like Apport and systemd-coredump are designed to handle crash reporting and core dumps in Linux...

2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of 2BrightSparks SyncBackFree. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. User interaction on the part of an...