Improper Access Control in Samsung Notes Affects User Data

CVE-2025-21037

What is CVE-2025-21037?

The identified vulnerability in Samsung Notes allows unauthorized access to user data across multiple profiles due to improper access control mechanisms. This issue requires user interaction to be exploited, posing a risk to confidentiality when physical attackers target devices. Users must ensure their applications are updated to version 4.4.30.63 or later to mitigate this risk. For further details, please refer to the official Samsung security advisory.

References