Watch Plugin
Monthly
Local information disclosure in Samsung Mobile's Watch Plugin for Android allows attackers with physical or local software access to read sensitive data from the device. Affected versions are all Watch Plugin releases prior to the Android Watch 17 patch, as confirmed by the Samsung Mobile security advisory. No active exploitation (not in CISA KEV) and no public proof-of-concept code are identified at time of analysis; the CVSS 4.0 score of 2.1 accurately reflects the constrained local-only, low-confidentiality-impact nature of this vulnerability.
Local information disclosure in Samsung Mobile's Watch Plugin for Android allows attackers with physical or local software access to read sensitive data from the device. Affected versions are all Watch Plugin releases prior to the Android Watch 17 patch, as confirmed by the Samsung Mobile security advisory. No active exploitation (not in CISA KEV) and no public proof-of-concept code are identified at time of analysis; the CVSS 4.0 score of 2.1 accurately reflects the constrained local-only, low-confidentiality-impact nature of this vulnerability.