Samsung Calendar vulnerabilities

5 CVEs affecting Samsung Calendar, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-21035, published 2025-09-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-39915, published 2022-12-08. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows…
CVE-2025-21035, published 2025-09-03. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles.
CVE-2023-30678, published 2023-07-06. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Potential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows attackers to write arbitrary file.
CVE-2022-33705, published 2022-07-12. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Information exposure in Calendar prior to version 12.3.05.10000 allows attacker to access calendar schedule without READ_CALENDAR permission.
CVE-2023-21464, published 2023-03-16. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status.