CVE-2025-20924 — Improper access control in Samsung Notes prior to version 4.4.26.71 allows physi... | CVE Daily

Medium CVSS 4.6

Overview

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles.

CWE: N/A Published: 2025-03-06T05:15:19.870

Risk analysis

This vulnerability is rated 🟡 MEDIUM.

CVSS: 4.6 (MEDIUM)
Detected tags: misconfiguration (tag impact: LOW)

Recommended actions:

Prioritize remediation based on business criticality and exposure.
Limit exposure and increase monitoring until fixed.

Recommended tools

Tags

Security Misconfiguration