7263 matches found
CVE-2025-21022
Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information...
CVE-2025-21022
CVE-2025-21022 affects Samsung Galaxy Wearable prior to 2.2.63.25042861. The issue is improper access control that could allow a local attacker to access sensitive information. Affected component is Galaxy Wearable software; root cause is access-control weakness. Mitigation seen in PT-2025-32113 ...
CVE-2025-21019
CVE-2025-21019 : Affected product is Samsung Health; versions prior to 6.30.1.003 suffer improper authorization that can allow a local attacker to access health data. The vulnerability requires user interaction to trigger. Impact is limited to data access within the Samsung Health app; no remote ...
CVE-2025-21016
Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allows local attackers to use the privileged APIs...
CVE-2025-21016
The CVE-2025-21016 issue affects Samsung PkgPredictorService in Chinese Android 13–16 prior to SMR Aug-2025 Release 1. The root cause is improper access control, enabling local attackers to invoke privileged APIs. Impact is limited to local privilege escalation via these privileged APIs, with doc...
CVE-2025-21015
Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege...
CVE-2025-21014
Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information...
CVE-2025-21010
Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account...
CVE-2025-21010
Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account...
CVE-2025-20990
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier...
PT-2025-32107 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions 13 through 16 Description: Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 allows local attackers to use privileged APIs. Recommendations: Update to SMR Aug-2025 Release 1 or later...
PT-2025-32057 · Kenwood · Kenwood Dmx958Xr
Name of the Vulnerable Software and Affected Versions: Kenwood DMX958XR affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices without authentication. The flaw resides in the...
Linux Distros Unpatched Vulnerability : CVE-2021-43057
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinuxptracetraceme aka the SELinux handler for PTRACETRACEME could be used by...
PT-2025-31854 · Unknown +1 · Vsssvr.Dll +2
Name of the Vulnerable Software and Affected Versions: Macrium Reflect versions through 2025-06-26 Description: Macrium Reflect allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the same directory...
kernel: Linux kernel (i2c Tegra): Information disclosure or denial of service via SMBUS block read with invalid length
A flaw was found in the Linux kernel's i2c Tegra driver. A local attacker with high privileges could exploit this vulnerability by providing a specially crafted SMBUS System Management Bus block read message with an invalid length. This could lead to an out-of-bounds read, potentially resulting i...
VMware ESXi VMCI Uninitialized Memory Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware ESXi. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
(Pwn2Own) Oracle VirtualBox VMSVGA Out-Of-Bounds Write Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...
CVE-2025-21005
Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information...