Security Vulnerabilities - CVEs Published In September 2025
Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information.
CVSS Score
6.2
EPSS Score
0.001
Published
2025-09-03
Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability.
CVSS Score
4.1
EPSS Score
0.001
Published
2025-09-03
Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.
CVSS Score
5.1
EPSS Score
0.001
Published
2025-09-03
Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.
CVSS Score
5.1
EPSS Score
0.001
Published
2025-09-03
Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.
CVSS Score
5.1
EPSS Score
0.001
Published
2025-09-03
Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code.
CVSS Score
4.0
EPSS Score
0.001
Published
2025-09-03
Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles.
CVSS Score
4.6
EPSS Score
0.002
Published
2025-09-03
Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for triggering this vulnerability.
CVSS Score
5.0
EPSS Score
0.001
Published
2025-09-03
Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions.
CVSS Score
5.9
EPSS Score
0.002
Published
2025-09-03
Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information.
CVSS Score
4.0
EPSS Score
0.001
Published
2025-09-03