Samsung Myfiles vulnerabilities

4 CVEs affecting Samsung Myfiles, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20926, published 2025-03-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-20804, published 2024-01-04. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write…
CVE-2024-20805, published 2024-01-04. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary…
CVE-2023-21463, published 2023-03-16. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive…
CVE-2025-20926, published 2025-03-06. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper export of Android application components in My Files prior to version 15.0.07.5 in Android 14 allows local attackers to access files with My Files' privilege.