Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-21010 State: PUBLISHED Published: 2025-08-06T04:23:23.524Z Last Updated: 2025-08-06T15:38:59.848Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269: Improper Privilege Management Description: Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=08
CVE ID: CVE-2025-21011 State: PUBLISHED Published: 2025-08-06T04:23:24.884Z Last Updated: 2025-08-06T15:38:54.866Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to motion and body sensors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=08
CVE ID: CVE-2025-21012 State: PUBLISHED Published: 2025-08-06T04:23:25.955Z Last Updated: 2025-08-06T13:46:49.858Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to modify fall detection configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=08
CVE ID: CVE-2025-21013 State: PUBLISHED Published: 2025-08-06T04:23:27.383Z Last Updated: 2025-08-06T13:45:27.928Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to outdoor exercise and sleep time. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=08
CVE ID: CVE-2025-21014 State: PUBLISHED Published: 2025-08-06T04:23:28.457Z Last Updated: 2025-08-06T13:44:33.110Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-926 : Improper Export of Android Application Components Description: Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=08
CVE ID: CVE-2025-21015 State: PUBLISHED Published: 2025-08-06T04:23:30.239Z Last Updated: 2025-08-06T13:44:16.974Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) Description: Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=08
CVE ID: CVE-2025-21016 State: PUBLISHED Published: 2025-08-06T04:23:31.372Z Last Updated: 2025-08-06T13:43:48.240Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allows local attackers to use the privileged APIs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=08
CVE ID: CVE-2025-21017 State: PUBLISHED Published: 2025-08-06T04:23:32.591Z Last Updated: 2025-08-13T15:03:37.515Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: Samsung Mobile Products: Blockchain Keystore Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08
CVE ID: CVE-2025-21018 State: PUBLISHED Published: 2025-08-06T04:23:33.842Z Last Updated: 2025-08-06T13:38:00.618Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Blockchain Keystore Problem Types: CWE-125 Out-of-bounds Read Description: Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08
CVE ID: CVE-2025-21019 State: PUBLISHED Published: 2025-08-06T04:23:35.377Z Last Updated: 2025-08-06T13:37:45.389Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Health Problem Types: CWE-285: Improper Authorization Description: Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08
CVE ID: CVE-2025-21020 State: PUBLISHED Published: 2025-08-06T04:23:36.742Z Last Updated: 2025-08-13T15:03:38.723Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Blockchain Keystore Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08
CVE ID: CVE-2025-21021 State: PUBLISHED Published: 2025-08-06T04:23:38.208Z Last Updated: 2025-08-13T15:03:39.907Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Blockchain Keystore Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08
CVE ID: CVE-2025-21022 State: PUBLISHED Published: 2025-08-06T04:23:39.667Z Last Updated: 2025-08-06T15:38:41.296Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Galaxy Wearable Problem Types: CWE-284: Improper Access Control Description: Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08
CVE ID: CVE-2025-21023 State: PUBLISHED Published: 2025-08-06T04:23:41.082Z Last Updated: 2025-08-06T15:38:36.100Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: WcsExtension for Galaxy Watch Problem Types: CWE-284: Improper Access Control Description: Improper access control in WcsExtension for Galaxy Watch prior to Android Watch 16 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08
CVE ID: CVE-2025-21024 State: PUBLISHED Published: 2025-08-06T04:23:42.218Z Last Updated: 2025-08-06T15:38:16.728Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Smart View Problem Types: CWE-927: Use of Implicit Intent for Sensitive Communication Description: Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08
CVE ID: CVE-2025-21025 State: PUBLISHED Published: 2025-09-03T06:05:29.792Z Last Updated: 2025-09-03T18:35:42.657Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21026 State: PUBLISHED Published: 2025-09-03T06:05:30.967Z Last Updated: 2025-09-03T18:25:31.893Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-280: Improper handling of insufficient permission Description: Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21027 State: PUBLISHED Published: 2025-09-03T06:05:32.027Z Last Updated: 2025-09-03T13:33:59.726Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-925 : Improper Verification of Intent by Broadcast Receiver Description: Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21028 State: PUBLISHED Published: 2025-09-03T06:05:33.074Z Last Updated: 2025-09-03T13:33:43.917Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Improper Privilege Management Description: Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21029 State: PUBLISHED Published: 2025-09-03T06:05:34.096Z Last Updated: 2025-09-03T13:33:32.233Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-280: Improper handling of insufficient permission Description: Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21030 State: PUBLISHED Published: 2025-09-03T06:05:35.118Z Last Updated: 2025-09-03T13:33:16.454Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-280: Improper Handling of Insufficient Permissions Description: Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows local attackers to execute arbitrary application in the background. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21031 State: PUBLISHED Published: 2025-09-03T06:05:36.178Z Last Updated: 2025-09-03T15:43:30.822Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21032 State: PUBLISHED Published: 2025-09-03T06:05:37.232Z Last Updated: 2025-09-03T18:16:42.822Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21033 State: PUBLISHED Published: 2025-09-03T06:05:38.235Z Last Updated: 2025-09-03T17:51:53.083Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21034 State: PUBLISHED Published: 2025-09-03T06:05:39.296Z Last Updated: 2025-09-03T13:33:00.811Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21035 State: PUBLISHED Published: 2025-09-03T06:05:40.334Z Last Updated: 2025-09-03T13:28:09.159Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Calendar Problem Types: CWE-284: Improper Access Control Description: Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=09
CVE ID: CVE-2025-21036 State: PUBLISHED Published: 2025-09-03T06:05:41.363Z Last Updated: 2025-09-03T16:00:28.873Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-927: Use of Implicit Intent for Sensitive Communication Description: Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=09
CVE ID: CVE-2025-21037 State: PUBLISHED Published: 2025-09-03T06:05:42.438Z Last Updated: 2025-09-03T15:11:05.212Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: SamsungNotes Problem Types: CWE-284: Improper Access Control Description: Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=09
CVE ID: CVE-2025-21038 State: PUBLISHED Published: 2025-09-03T06:05:43.506Z Last Updated: 2025-09-03T15:09:54.868Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: S Assistant Problem Types: CWE-925 : Improper Verification of Intent by Broadcast Receiver Description: Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=09
CVE ID: CVE-2025-21039 State: PUBLISHED Published: 2025-09-03T06:05:44.552Z Last Updated: 2025-09-03T14:56:22.550Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: S Assistant Problem Types: CWE-925 : Improper Verification of Intent by Broadcast Receiver Description: Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=09
CVE ID: CVE-2025-21040 State: PUBLISHED Published: 2025-09-03T06:05:46.063Z Last Updated: 2025-09-03T14:50:13.952Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: S Assistant Problem Types: CWE-925 : Improper Verification of Intent by Broadcast Receiver Description: Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=09
CVE ID: CVE-2025-21041 State: PUBLISHED Published: 2025-09-03T06:05:47.132Z Last Updated: 2025-09-03T19:45:05.437Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Secure Folder Problem Types: CWE-922 Insecure Storage of Sensitive Information Description: Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=09
CVE ID: CVE-2025-21042 State: PUBLISHED Published: 2025-09-12T07:21:49.997Z Last Updated: 2025-11-11T04:55:32.515Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=04
CVE ID: CVE-2025-21043 State: PUBLISHED Published: 2025-09-12T07:21:51.025Z Last Updated: 2025-10-21T22:45:18.366Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787: Out-of-bounds Write Description: Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09
CVE ID: CVE-2025-21044 State: PUBLISHED Published: 2025-10-10T06:33:02.865Z Last Updated: 2025-10-18T03:55:46.816Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21045 State: PUBLISHED Published: 2025-10-10T06:33:03.966Z Last Updated: 2025-10-10T19:08:09.593Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-922 Insecure Storage of Sensitive Information Description: Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21046 State: PUBLISHED Published: 2025-10-10T06:33:05.049Z Last Updated: 2025-10-10T19:08:35.434Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Improper Access Control Description: Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21047 State: PUBLISHED Published: 2025-10-10T06:33:06.182Z Last Updated: 2025-10-10T19:09:00.217Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21048 State: PUBLISHED Published: 2025-10-10T06:33:07.200Z Last Updated: 2025-10-11T03:55:11.359Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-23 Relative Path Traversal Description: Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10
CVE ID: CVE-2025-21049 State: PUBLISHED Published: 2025-10-10T06:33:08.228Z Last Updated: 2025-10-10T14:20:56.273Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=10