CVE-2025-32098
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-02

Last updated on: 2025-09-05

Assigner: MITRE

Description
An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-02
Last Modified
2025-09-05
Generated
2026-06-16
AI Q&A
2025-09-02
EPSS Evaluated
2026-06-14
NVD
CVE-2025-32098
EUVD
EUVD-2025-26421
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
samsung magician From 6.3.0 (inc) to 8.3.0 (inc)
microsoft windows *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in Samsung Magician versions 6.3 through 8.3 on Windows. It involves insecure file delete operations during the software's update process, which an attacker can exploit to gain elevated privileges, specifically SYSTEM level access. Essentially, improper handling of file deletions during updates allows unauthorized users to escalate their privileges on the affected system. [1]

Impact Analysis

If exploited, this vulnerability allows an attacker to elevate their privileges to SYSTEM level on a Windows machine running Samsung Magician 6.3 to 8.3. This means the attacker could gain full control over the system, potentially leading to unauthorized access, modification, or deletion of data, installation of malicious software, or disruption of system operations. [1]

Mitigation Strategies

To mitigate this vulnerability, you should avoid using vulnerable versions of Samsung Magician (6.3 through 8.3) on Windows until a patch or update is provided. Monitor official Samsung Semiconductor security updates for any released patches addressing this issue. Additionally, restrict user permissions to prevent unauthorized execution of the update process and consider disabling automatic updates for Samsung Magician until the vulnerability is resolved. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-32098. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart