Samsung One UI vulnerabilities

2 CVEs affecting Samsung One UI, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20871, published 2024-05-07.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-20871, published 2024-05-07. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection.
• CVE-2021-25335, published 2021-03-04. Low severity, CVSS 2.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows unauthenticated users to access hidden notification contents over the…