CVE-2022-27840: Samsung Recovery

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbitrary files as SamsungRecovery permission.

Affected products

• Samsung Recovery: before 8.1.43.0 (fixed in 8.1.43.0)

Published 2022-04-11. Last modified 2026-06-17.