Lucene search
+L

1314 matches found

Cvelist
Cvelist
•added 2025/04/09 7:35 a.m.•57 views

CVE-2025-20952

Improper access control in Mdecservice prior to SMR Apr-2025 Release 1 allows local attackers to access arbitrary files with system privilege...

5.5CVSS0.00142EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/09 4:18 a.m.•48 views

CVE-2025-20655

In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04427687; Issue ID: MSV-3183...

5.3CVSS5.9AI score0.00077EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•11 views

CVE-2025-20952: Undefined Security Weakness

Improper access control in Mdecservice prior to SMR Apr-2025 Release 1 allows local attackers to access arbitrary files with system privilege...

5.5CVSS6AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/08 5:15 a.m.•22 views

CVE-2025-20934

Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files with system privilege...

5.5CVSS0.00148EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/08 5:15 a.m.•16 views

CVE-2025-20935

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access files with system privilege. User interaction is required for triggering this vulnerability...

5.5CVSS0.00171EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/08 4:39 a.m.•71 views

CVE-2025-20935

CVE-2025-20935 concerns Samsung ClipboardService before SMR Apr-2025 Release 1. The issue is improper handling of insufficient permissions, allowing local attackers to access files with system privileges, with user interaction required to trigger the vulnerability. Affected component: ClipboardSe...

5.5CVSS6.9AI score0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/08 4:39 a.m.•10 views

CVE-2025-20935

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access files with system privilege. User interaction is required for triggering this vulnerability...

5.5CVSS6.9AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/08 4:39 a.m.•43 views

CVE-2025-20935

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access files with system privilege. User interaction is required for triggering this vulnerability...

5.5CVSS0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/08 4:39 a.m.•15 views

CVE-2025-20934

Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files with system privilege...

5.5CVSS5.8AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/08 4:39 a.m.•95 views

CVE-2025-20934

CVE-2025-20934 describes an improper access control vulnerability in Samsung’s Sticker Center prior to the SMR Apr-2025 Release 1. The issue allows local attackers with low privileges to access image files with system-level privileges, implying a local privilege escalation risk. Affected software...

5.5CVSS5.8AI score0.00148EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/04/08 4:39 a.m.•41 views

CVE-2025-20934

Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files with system privilege...

5.5CVSS0.00148EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•9 views

CVE-2025-20934: Improper Export of Android Application Components

Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files with system privilege...

5.5CVSS5.8AI score0.00148EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•10 views

CVE-2025-20935: Undefined Security Weakness

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access files with system privilege. User interaction is required for triggering this vulnerability...

5.5CVSS5.9AI score0.00171EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/04/07 4:15 a.m.•10 views

CVE-2025-20661

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3185...

6.7CVSS6.8AI score0.00084EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/04/07 4:15 a.m.•25 views

CVE-2025-20657

In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609...

6.7CVSS6.7AI score0.00084EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/04/07 4:15 a.m.•18 views

CVE-2025-20655

In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04427687; Issue ID: MSV-3183...

5.3CVSS5.9AI score0.00077EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/07 4:15 a.m.•27 views

CVE-2025-20657

In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609...

6.7CVSS6.7AI score0.00084EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/07 3:14 a.m.•38 views

CVE-2025-20657

In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609...

0.00084EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/07 3:14 a.m.•45 views

CVE-2025-20655

In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04427687; Issue ID: MSV-3183...

0.00077EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•7 views

CVE-2025-20657: Out-of-bounds Write

In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609...

6.7CVSS6.7AI score0.00084EPSS
SaveExploits0References1
Rows per page
Query Builder