7322 matches found
CVE-2025-20987
The CVE-2025-20987 issue is tied to fingerprint trustlet on Samsung devices, where improper access control allows local privileged attackers to obtain an auth_token. According to PT-2025-23749 (Fingerprint trustlet) and related sources, affected versions are before SMR May-2025 Release 1. The roo...
CVE-2025-20986
CVE-2025-20986 affects ScreenCapture on Samsung Galaxy Watch prior to SMR Jun-2025 Release 1. Root cause: improper access control in the ScreenCapture function. Impact: local attackers could obtain screenshots, with confidentiality impact rated High; exploitability is local with low attack comple...
CVE-2025-20986
Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots...
CVE-2025-20985
Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items...
CVE-2025-20985
CVE-2025-20985 affects Samsung ThemeManager on devices running before SMR Jun-2025 Release 1. The vulnerability arises from improper privilege management, enabling local privileged attackers to reuse trial items. Impact is described as local privilege escalation; exploitation details are not prov...
CVE-2025-20981
Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive information...
CVE-2024-11857
Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary fil...
PT-2025-23685 · Openssl +1 · Openssl +1
Name of the Vulnerable Software and Affected Versions: Action1 affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...
CVE-2024-11857
Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary fil...
Blackmagic Design DaVinci Resolve 安全漏洞
Blackmagic Design DaVinci Resolve is a software tool that combines editing, color correction, visual effects, motion graphics, and audio post-production in one package. A security vulnerability exists in Blackmagic Design DaVinci Resolve, which stems from insufficient dynamic library loading...
GHSA-G88V-2J67-9RMX Fess has Insecure Temporary File Permissions
Summary Fess an open-source Enterprise Search Server creates temporary files without restrictive permissions, which may allow local attackers to read sensitive information from these temporary files. Details The createTempFile method in org.codelibs.fess.helper.SystemHelper creates temporary file...
CVE-2024-34637
Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background...
CVE-2024-34651
Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files...
CVE-2024-34638
Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded applications...
CVE-2024-34647
Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to knox without proper license...
CVE-2024-34611
Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information...
CVE-2024-34606
Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background...
CVE-2024-34630
Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...