CVE-2025-57836

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder with weak permissions during installation, allowing a non-admin user to perform DLL hijacking and escalate privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Jan 5, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-578372.9Tileservice module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confident CVE-2025-578384.0Some Honor products are affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confide CVE-2025-578394.0Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality CVE-2025-57848.8A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects un CVE-2025-578402.2ADB(Android Debug Bridge) is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availabilit CVE-2025-578468.5Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated att CVE-2025-578476.4A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file b CVE-2025-578486.4A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd fil CVE-2025-578496.4A container privilege escalation flaw was found in certain Fuse images. This issue stems from the /etc/passwd file being created with group-CVE-2025-57856.5A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the CVE-2025-578506.4A container privilege escalation flaw was found in certain CodeReady Workspaces images. This issue stems from the /etc/passwd file being cre CVE-2025-578516.7A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images. This issue stems from the /etc/passwd