Back to CVE Browser

CVE-2021-25369

🔥 Known Exploited (CISA KEV)MEDIUM

6.2

CVSS Severity Score

EPSS Score51.5890%

EPSS Percentile97.15th

Published2021-03-26

Last Modified2025-10-30

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

Affected Platforms (CPE)

💻

Samsung

Android

= 8.0= 8.1= 9.0= 10.0

References & Advisories

🔗 https://security.samsungmobile.com

🔗 https://security.samsungmobile.com/securityUpdate.smsb

🔗 https://security.samsungmobile.com

🔗 https://security.samsungmobile.com/securityUpdate.smsb

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25369

Related Vulnerabilities

CVE-2026-84977.4

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earli...

CVE-2026-628285.4

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.

CVE-2026-164047.4

Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-163976.5

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.