216304 matches found
EUVD-2025-33673
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability...
CVE-2025-21059
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...
EUVD-2025-33674
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...
CVE-2025-21059
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...
CVE-2025-21059
Samsung Health before version 6.30.5.105 suffers an improper authorization vulnerability that allows local attackers to access data within the app. The CVE-2025-21059 entries from NVD, Red Hat, CVE List, and other sources corroborate that the issue is scoped to Samsung Health and enables local ac...
CVE-2025-21057
Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes...
CVE-2025-21057
CVE-2025-21057 affects Samsung Notes with vulnerable versions prior to 4.4.30.63. The root cause is use of implicit intents for sensitive communication, enabling a local attacker to access shared notes. The issue is documented across multiple sources (NVD, RH, CNVD, and PT Security) confirming th...
EUVD-2025-33676
Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes...
CVE-2025-21055
CVE-2025-21055 concerns an out-of-bounds read/write in Samsung’s QuramDNG codec library, specifically the shared object libimagecodec.quram.so. The root cause is memory boundary violations when processing certain image data, enabling a remote attacker to access memory outside the intended buffers...
CVE-2025-21055
Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory...
EUVD-2025-33681
Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2025-21049
Samsung SecSettings suffers an improper access control flaw prior to SMR Oct-2025 Release 1. This is exploitable by local attackers and requires user interaction to trigger, potentially exposing sensitive information. The issue is documented across multiple sources (CVE-2025-21049) with a medium ...
EUVD-2025-33684
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs...
CVE-2025-21047
CVE-2025-21047 affects KnoxGuard. Multiple sources describe an improper access control flaw in KnoxGuard prior to SMR Oct-2025 Release 1 that could allow a physical attacker to use privileged APIs. Affected software is KnoxGuard with the vulnerability rooted in access control weaknesses enabling ...
CVE-2025-21047
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs...
CVE-2025-21047
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs...
CVE-2025-21046
Samsung DeX's WindowManager improper access control lets a physically present attacker temporarily view the recent apps list before SMR Oct-2025 Release 1. Affected product: Samsung DeX (prior to the SMR Oct-2025 Release 1). Root cause: access control flaw in WindowManager. Impact: local disclosu...
CVE-2025-21046
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...