Samsung System Support Service
Monthly
Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 allows a local low-privileged attacker to invoke privileged system functions without adequate authorization checks. The CVSS 4.0 subsequent-system metrics (SC:H/SI:H/SA:H) indicate that while the vulnerable service component itself has limited direct exposure, the downstream blast radius extends to high-impact confidentiality, integrity, and availability compromise of broader system components. No public exploit has been identified and EPSS sits at 0.01% (2nd percentile), with CISA SSVC confirming no known exploitation at time of analysis.
Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 allows a local low-privileged attacker to invoke privileged system functions without adequate authorization checks. The CVSS 4.0 subsequent-system metrics (SC:H/SI:H/SA:H) indicate that while the vulnerable service component itself has limited direct exposure, the downstream blast radius extends to high-impact confidentiality, integrity, and availability compromise of broader system components. No public exploit has been identified and EPSS sits at 0.01% (2nd percentile), with CISA SSVC confirming no known exploitation at time of analysis.