Cyberfeed6 › Vendors › Samsung
CISA lists 15 Samsung vulnerabilities as exploited in real attacks. Most entries concern Mobile Devices, MagicINFO 9 Server.
Showing the 15 most recently added of 15. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2024-7399Samsung MagicINFO 9 Server Path Traversal Vulnerability | MagicINFO 9 Server | 2026-04-24 | High (8.8) | No | Vendor notice |
| CVE-2025-21042Samsung Mobile Devices Out-of-Bounds Write Vulnerability | Mobile Devices | 2025-11-10 | High (8.8) | No | Vendor notice |
| CVE-2025-21043Samsung Mobile Devices Out-of-Bounds Write Vulnerability | Mobile Devices | 2025-10-02 | High (8.8) | No | Vendor notice |
| CVE-2025-4632Samsung MagicINFO 9 Server Path Traversal Vulnerability | MagicINFO 9 Server | 2025-05-22 | Critical (9.8) | No | Vendor notice |
| CVE-2022-22265Samsung Mobile Devices Use-After-Free Vulnerability | Mobile Devices | 2023-09-18 | Medium (5.0) | No | Vendor notice |
| CVE-2021-25489Samsung Mobile Devices Improper Input Validation Vulnerability | Mobile Devices | 2023-06-29 | Low (3.3) | No | Vendor notice |
| CVE-2021-25487Samsung Mobile Devices Out-of-Bounds Read Vulnerability | Mobile Devices | 2023-06-29 | High (7.3) | No | Vendor notice |
| CVE-2021-25395Samsung Mobile Devices Race Condition Vulnerability | Mobile Devices | 2023-06-29 | Medium (6.4) | No | Vendor notice |
| CVE-2021-25394Samsung Mobile Devices Race Condition Vulnerability | Mobile Devices | 2023-06-29 | Medium (6.4) | No | Vendor notice |
| CVE-2021-25372Samsung Mobile Devices Improper Boundary Check Vulnerability | Mobile Devices | 2023-06-29 | Medium (6.1) | No | Vendor notice |
| CVE-2021-25371Samsung Mobile Devices Unspecified Vulnerability | Mobile Devices | 2023-06-29 | Medium (6.1) | No | Vendor notice |
| CVE-2023-21492Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | Mobile Devices | 2023-05-19 | Medium (4.4) | No | Vendor notice |
| CVE-2021-25370Samsung Mobile Devices Memory Corruption Vulnerability | Mobile Devices | 2022-11-08 | Medium (6.1) | No | Vendor notice |
| CVE-2021-25369Samsung Mobile Devices Improper Access Control Vulnerability | Mobile Devices | 2022-11-08 | Medium (6.2) | No | Vendor notice |
| CVE-2021-25337Samsung Mobile Devices Improper Access Control Vulnerability | Mobile Devices | 2022-11-08 | Medium (4.4) | No | Vendor notice |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.