ZDI-CAN-28705 HIGH 7.8 Overdue Dec 16, 2025

Samsung

Samsung, a major consumer electronics and computing manufacturer, has a high-severity vulnerability (CVSS 7.8) that requires local access and low-level user privileges to exploit, with potential for complete compromise of confidentiality, integrity, and availability on affected systems. The vulnerability poses no risk of remote exploitation and does not require user interaction once an attacker gains local access. Security teams should monitor for patches expected by April 2026 and prioritize systems with untrusted local users or those in shared environments where privilege escalation could occur.

Advisory Details
Researcher Discovered by: Bobby Gould (@bobbygould5) of Trend Zero Day Initiative
Reported December 16, 2025
Deadline April 15, 2026 2d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy