CVE Catalog
CVE-2025-21050
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.13%
2th percentile - higher than 2% of all known CVEs
Summary
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.
Risk Assessment
A local attacker could access data belonging to other user profiles, breaching data confidentiality and isolation.
Recommendation
Apply the SMR Oct-2025 Release 1 update or later.
Other vulnerabilities in Contacts
Original NVD description (English source)
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS