VULNERABILITY INTELLIGENCE

CVE-2025-21035

CVSS score4.6 MEDIUM

EPSS probability0.22%

CISA KEVNot currently listed

Published2025-09-03

Last modified2026-06-17

Description

Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles.