CVE-2025-20899
CVE-2025-20899
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
04 Feb 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Improper access control in PushNotification prior to version 13.0.00.15 in Android 12, 14.0.00.7 in Android 13, and 15.1.00.5 in Android 14 allows local attackers to access sensitive information.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Samsung Mobile · PushNotificationWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →