CVE-2025-32098 — Improper Privilege Management in Samsung Magician

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.0%
top 87.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Samsung Magician
Timeline
PublishedSep 2
Latest updateSep 5

Description

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

▶NVDsamsung/magician6.3.0 — 8.3.0

🔴Vulnerability Details

2
GHSA
GHSA-995g-8hp5-7rv9: An issue was discovered in Samsung Magician 6↗2025-09-05
▶
CVEList
CVE-2025-32098: An issue was discovered in Samsung Magician 6↗2025-09-02
▶
CVE-2025-32098 — Improper Privilege Management | cvebase