CVE-2025-21035medium

CVE-2025-21035: medium-severity vulnerability in Samsung Calendar

Published

Follow this CVE+ Monitor Samsung Calendar

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.6epss 0.2%
Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Samsung Mobile · Samsung Calendar
Related CVEs — Samsung Calendar

In the same product, most dangerous first.

CVE-2022-39915LOWCVE-2022-39915EPSS 0.3%CVE-2023-21464MEDIUMCVE-2023-21464EPSS 0.1%