Samsung Magician vulnerabilities

8 CVEs affecting Samsung Magician, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-57836, published 2026-01-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-3218, published 2017-06-21. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for software updates.
CVE-2025-32098, published 2025-09-02. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update…
CVE-2024-23769, published 2024-02-07. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 (for Windows) allows a local attacker to read privileged data.
CVE-2024-31952, published 2024-05-14. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, an attacker can escalate privileges via arbitrary file permission writes. (The…
CVE-2024-53921, published 2024-12-03. Low severity, CVSS 2.8. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders in the system permission directory via a symbolic link during the installation…
CVE-2024-31953, published 2024-05-14. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. An issue was discovered in Samsung Magician 8.0.0 on macOS. Because it is possible to tamper with the directory and executable files used during the installation process, an attacker can escalate…
CVE-2024-36071, published 2024-06-20. Medium severity, CVSS 6.3. EPSS: 0.1% chance of exploitation in the next 30 days. Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search…
CVE-2025-57836, published 2026-01-05. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder with weak permissions during installation, allowing a non-admin user to perform…