CVE-2023-21469

Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.GEOFENCE action...

CVE-2023-21469

Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.GEOFENCE action...

CVE-2023-21466

PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission...

PT-2025-35670

Name of the Vulnerable Software and Affected Versions: TIGERF trustlet versions prior to SMR Apr-2023 Release 1 Description: An improper input validation issue exists in the TIGERF trustlet, potentially allowing local attackers to access protected data. Recommendations: Update to SMR Apr-2023...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Sep-2025 Release 1, which stems from improper access control and could...

PT-2025-35695

Name of the Vulnerable Software and Affected Versions: Android versions prior to 16 Description: The Secure Folder feature exhibits insecure storage of sensitive information, potentially allowing local attackers to gain unauthorized access to this data. Recommendations: Update to Android version ...

PT-2025-35687

Name of the Vulnerable Software and Affected Versions: ContactProvider versions prior to SMR Sep-2025 Release 1 Description: Improper access control in ContactProvider allows local attackers to access sensitive information. Recommendations: Update ContactProvider to SMR Sep-2025 Release 1 or late...

PT-2025-35682

Name of the Vulnerable Software and Affected Versions: ThemeManager versions prior to SMR Sep-2025 Release 1 Description: Improper privilege management in ThemeManager allows local privileged attackers to reuse trial items. Recommendations: Update ThemeManager to SMR Sep-2025 Release 1 or later...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Sep-2025 Release 1, which stems from improper privilege management and...

PT-2025-35663

Name of the Vulnerable Software and Affected Versions: SLocation versions prior to SMR Apr-2022 Release 1 Description: An improper access control issue exists in SLocation. Local attackers can obtain device location information by utilizing the com.samsung.android.wifi.NETWORK LOCATION action...

PT-2025-35694

Name of the Vulnerable Software and Affected Versions: S Assistant versions prior to 9.3.2 Description: Improper verification of intent by ExternalBroadcastReceiver in S Assistant allows local attackers to modify itinerary information. Recommendations: Update S Assistant to version 9.3.2 or later...

PT-2025-35690

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.30.63 Description: Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for exploitation...

SAMSUNG Secure Folder 安全漏洞

SAMSUNG Secure Folder is a privacy protection software from Samsung South Korea. A security vulnerability exists in SAMSUNG Secure Folder Android prior to version 16, which stems from insecure storage of sensitive information and could lead to a local attacker accessing sensitive information...

PT-2025-35683

Name of the Vulnerable Software and Affected Versions: System UI versions prior to SMR Sep-2025 Release 1 Description: Improper handling of insufficient permission in System UI allows local attackers to send arbitrary replies to messages from the cover display. Recommendations: Update System UI t...

PT-2025-35684

Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR Sep-2025 Release 1 Description: The improper handling of insufficient permission in the AppPrelaunchManagerService allows local attackers to execute arbitrary applications in the background. Recommendations: Upda...

PT-2025-35679

Name of the Vulnerable Software and Affected Versions: MARsExemptionManager versions prior to SMR Sep-2025 Release 1 Description: Improper access control in MARsExemptionManager allows local attackers to be excluded from background execution management. Recommendations: Update MARsExemptionManage...

PT-2025-35685

Name of the Vulnerable Software and Affected Versions: ImsService versions prior to SMR Sep-2025 Release 1 Description: An improper access control issue exists in ImsService. This allows local attackers to utilize privileged APIs. Recommendations: Update ImsService to SMR Sep-2025 Release 1 or...

CVE-2025-8700

Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context...

CVE-2023-41471

Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKEND-PLANS is accessible only to actors who already have write access to the server, and they can...

CVE-2025-43882

Dell ThinOS 10 is affected by CVE-2025-43882. Prior to version 2508_10.0127, an unverified ownership condition could allow a local, low-privileged attacker to achieve Unauthorized Access. The issue is documented across multiple sources (including Red Hat and PT Security references) with a CVSSv3....