2025

Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung He

Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bou

Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged att

Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allo

Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document s

Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers

Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to a

Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to mod

Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to a

Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to dea

Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access

The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown W

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via an Elementor display setting in all ver

The Reveal Listing plugin by smartdatasoft for WordPress is vulnerable to privilege escalation in versions up to, and in

Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affect

Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulne

Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation o

Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of t

Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of t

Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerability

Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successfu

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succe

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succe

Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exp

Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cau

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cau

The Zakra theme for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the w

Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code

Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability m

Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succe

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successfu

Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of

Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of

Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of thi

Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulner

Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this

:Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vulne

Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful e

Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of thi

Out-of-bounds write vulnerability in the skia module. Impact: Successful exploitation of this vulnerability may affect s

Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect

Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may

Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnerab

Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows physically pre

Kenwood DMX958XR libSystemLib Command injection Remote Code Execution Vulnerability. This vulnerability allows physicall

Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-a

Kenwood DMX958XR JKRadioService Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allo

Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability. This vulnerability allows physical