Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.1

Media Controller versions before 1.0.24.5282: Local attacker can launch unauthorized activities

CVE-2025-20902 · published 1 year ago
Summary

A vulnerability in Media Controller, a software used to control media playback, allows a local attacker to perform actions that require elevated privileges. This could potentially lead to unauthorized changes to system settings or data. To protect your system, update to version 1.0.24.5282 or later.

Original advisory text
Improper access control in Media Controller prior to version 1.0.24.5282 allows local attacker to launch activities in MediaController's privilege.
Improper access control in Media Controller prior to version 1.0.24.5282 allows local attacker to launch activities in MediaController's privilege.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.1 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published4 Feb 2025
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-20902 · NVD
Track software like this
Free during beta