CVE-2025-20998

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number...

CVE-2025-20997

Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch...

CVE-2025-20999

Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password...

CVE-2025-20998

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number...

CVE-2025-20999

Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password...

CVE-2025-20998

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number...

CVE-2025-21004

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device...

CVE-2025-21004

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device...

CVE-2025-20997

Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch...

CVE-2025-21004

The CVE-2025-21004 entry concerns Galaxy Watch System UI where improper verification of intents in the broadcast receiver enables a local attacker to power off the device. Affected scope is Galaxy Watch devices running firmware prior to the SMR Jul-2025 Release 1. The underlying issue is insuffic...

CVE-2025-21004

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device...

CVE-2025-21004

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device...

CVE-2025-20999

The CVE-2025-20999 issue affects Samsung Galaxy Tablet devices (prior to SMR Jul-2025 Release 1) and is due to improper authorization when accessing saved Wi‑Fi passwords, enabling a secondary user to retrieve the owner’s credentials. The root cause is insufficient access control for saved Wi‑Fi ...

CVE-2025-20999

Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password...

CVE-2025-20999

Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password...

CVE-2025-20998

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number...

CVE-2025-20998

CVE-2025-20998 affects Samsung Galaxy Watch via SamsungAccount. The issue is described as improper access control that could allow a local attacker to access a phone number on devices running versions prior to SMR Jul-2025 Release 1. The root cause is the improper access control in SamsungAccount...

CVE-2025-20998

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number...

CVE-2025-20997

CVE-2025-20997 affects Samsung Galaxy Watch Framework prior to SMR Jul-2025 Release 1. The issue is an incorrect default permission setting in the Framework, enabling a local attacker to reset certain Galaxy Watch configurations. Root cause: permissive defaults in the Framework component. Impact ...

CVE-2025-20997

Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch...