CVE-2025-57836

An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows

High · published January 5, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

⚡ A temporary folder with weak permissions is an open invitation for trouble! 🐾 Think of it like a hotel room that leaves the door ajar during check-in — anyone can wander in and take whatever they want, including valuable items left unattended. An unprivileged user could sneak in and perform DLL hijacking, allowing them to escalate their privileges. This means they could execute malicious code with elevated rights, potentially leading to complete system control. Yikes!

Put simply

Think of it like a hotel room that leaves the door ajar during check-in — anyone can wander in and take whatever they want, including valuable items left unattended. This vulnerability in Samsung Magician (versions 6.3.0 through 8.3.2) arises when the installer creates a temporary folder with weak permissions during installation, enabling non-admin users to manipulate DLL files.

What to do

An unprivileged user could sneak in and perform DLL hijacking, allowing them to escalate their privileges. This means they could execute malicious code with elevated rights, potentially leading to complete system control. Yikes! To mitigate this risk, ensure that users are running the latest version of Samsung Magician (update to at least 8.3.3). Additionally, review and tighten folder permissions during the installation process to prevent unauthorized access. 🛡️ You've got this! Following these steps will keep your system secure and running smoothly. 🚀

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00133 · 2.6th percentile
Published
2026-01-05T00:00Z
EPSS history
Timeline
  • 05 JAN 00:00Z
    An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows
    cvelistv5