An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process.
References
| Link | Resource |
|---|---|
| https://semiconductor.samsung.com/support/quality-support/product-security-updates/ | Vendor Advisory |
| https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-32098/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
05 Sep 2025, 19:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory | |
| References | () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-32098/ - Vendor Advisory | |
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:samsung:magician:*:*:*:*:*:*:*:* |
|
| First Time |
Microsoft
Microsoft windows Samsung Samsung magician |
03 Sep 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-269 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
02 Sep 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-02 18:15
Updated : 2025-09-05 19:33
NVD link : CVE-2025-32098
Mitre link : CVE-2025-32098
CVE.ORG link : CVE-2025-32098
JSON object : View
Products Affected
samsung
- magician
microsoft
- windows
CWE
CWE-269
Improper Privilege Management