What’s Vulnerable › Vulnerabilities
CVE-2025-21035
- Severity: medium (CVSS 4.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-09-03 · updated 2026-06-17
Description
Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles.
Affected products
- Samsung Mobile Samsung Calendar: before 12.5.06.5; before 12.6.01.12 — fixed in 12.5.06.5, 12.6.01.12
How to fix
Upgrade to a fixed version: Samsung Mobile Samsung Calendar 12.5.06.5, 12.6.01.12. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-21035 or the next vulnerability affects your stack