An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process.
References
| Link | Resource |
|---|---|
| https://semiconductor.samsung.com/support/quality-support/product-security-updates/ | Vendor Advisory |
| https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-32098/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
05 Sep 2025, 19:33
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:samsung:magician:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| First Time |
Microsoft windows
Samsung Microsoft Samsung magician |
|
| References | () https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - Vendor Advisory | |
| References | () https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-32098/ - Vendor Advisory |
03 Sep 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-269 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
02 Sep 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-02 18:15
Updated : 2025-09-05 19:33
NVD link : CVE-2025-32098
Mitre link : CVE-2025-32098
CVE.ORG link : CVE-2025-32098
JSON object : View
Products Affected
microsoft
- windows
samsung
- magician
CWE
CWE-269
Improper Privilege Management