CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position...

CVE-2025-20961

The connected PT-2025-20046 entry provides concrete details for CVE-2025-20961: the vulnerability affects the sepunion service, with improper handling of insufficient privileges allowing local privileged attackers to access files with system privileges. Affected versions are prior to SMR May-2025...

CVE-2025-20955

CVE-2025-20955 concerns Samsung Android SMR issues where NotificationHistoryImageProvider improperly exports components, enabling local attackers to access notification images. The vulnerability is described across multiple sources (NVD/Red Hat/CVE lists) as affecting Android components exported ...

CVE-2025-20954

Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...

PT-2025-20059 · Unknown · Package Installer

Name of the Vulnerable Software and Affected Versions: PackageInstallerCN versions prior to 15.0.11.0 Description: The issue is related to the improper handling of insufficient permission in PackageInstallerCN, allowing a local attacker to bypass user interaction for requested installations...

SAMSUNG AODService 安全漏洞

SAMSUNG AODService is a display function program from Samsung South Korea. A security vulnerability exists in SAMSUNG AODService versions prior to 8.8.28.12, which stems from an improperly exported Android application component, and could allow a local attacker to initiate arbitrary activity with...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. A security vulnerability exists in SAMSUNG SMR that stems from mishandling of insufficient privileges, which could lead to a locally privileged attacker...

SAMSUNG Flow 安全漏洞

SAMSUNG Flow is a software product from the South Korean company Samsung SAMSUNG. It is used to enable a seamless, secure, and connected experience on devices. A security vulnerability exists in SAMSUNG Flow versions prior to 4.9.17.6 that stems from insufficient validation of intent by the...

Cisco Catalyst SD-WAN Manager Privilege Escalation (cisco-sa-sdwan-priviesc-WCk7bmmt)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on the underlying...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in SAMSUNG SMR, which stems from the use of implicit intent for sensitive communications and could lead to a local attacker...

SAMSUNG PackageInstallerCN 安全漏洞

SAMSUNG PackageInstallerCN is a package installer from Samsung South Korea. A security vulnerability exists in SAMSUNG PackageInstallerCN prior to version 15.0.11.0, which stems from mishandling of insufficient privileges, and could allow a local attacker to bypass user interaction for installati...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in SAMSUNG SMR that stems from an out-of-bounds write during memory initialization, which could lead to a local attacker...

SAMSUNG Bixby Vision 安全漏洞

SAMSUNG Bixby Vision is a vision feature from the South Korean company Samsung SAMSUNG. You can get information about the world around you by simply turning on the camera. A security vulnerability exists in SAMSUNG Bixby Vision that stems from improper access control and could lead to a local...

PT-2025-20045 · Unknown · Cocktailbarservice

Name of the Vulnerable Software and Affected Versions: CocktailBarService versions prior to SMR May-2025 Release 1 Description: The issue is related to the improper handling of insufficient permissions in CocktailBarService, allowing local attackers to use the privileged API. This enables local...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. SAMSUNG SMR suffers from a security vulnerability that stems from mishandling of insufficient permissions, which could lead to a local attacker tracking the...

PT-2025-20276 · Cisco · Cisco Catalyst Sd-Wan Manager

Name of the Vulnerable Software and Affected Versions: Cisco Catalyst SD-WAN Manager affected versions not specified Description: A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an...

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite (cisco-sa-sdwan-fileoverwrite-Uc9tXWH)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of...

SAMSUNG Bixby 安全漏洞

SAMSUNG Bixby is a virtual assistant software from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Bixby versions prior to 2.3.74.8, which stems from mishandling of insufficient privileges and could lead to a local attacker accessing sensitive data...

PT-2025-20269 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in SAMSUNG SMR, which stems from improper access control and could allow a local attacker to initiate arbitrary activity wi...