{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Samsung vulnerabilities","home_page_url":"https://patchfirst.co/vendor/samsung/","feed_url":"https://patchfirst.co/feed/vendor/samsung.json","description":"New and newly exploited Samsung CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2024-7399#kev","url":"https://patchfirst.co/cve/CVE-2024-7399/","title":"[KEV] CVE-2024-7399: Samsung MagicINFO 9 Server Path Traversal Vulnerability","content_text":"Samsung · MagicINFO 9 Server. In CISA KEV since 2026-04-24. ENISA EUVD lists it as exploited. EPSS 91.9% (higher than 99.82% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 69.8 of 100.","summary":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","date_published":"2026-04-24T00:00:00.000Z","date_modified":"2026-10-01T19:17:15.000Z","tags":["kev","public-exploit","T1190","T1105"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2026-04-24","ransomware":false},"epss":{"score":0.91941,"percentile":0.99818},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Samsung","product":"MagicINFO 9 Server","techniqueIds":["T1190","T1105"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-21042#kev","url":"https://patchfirst.co/cve/CVE-2025-21042/","title":"[KEV] CVE-2025-21042: Samsung Mobile Devices Out-of-Bounds Write Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2025-11-10. ENISA EUVD lists it as exploited. EPSS 35.6% (higher than 98.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 74.6 of 100.","summary":"Samsung Mobile Devices Out-of-Bounds Write Vulnerability","date_published":"2025-11-10T00:00:00.000Z","date_modified":"2026-10-08T10:35:13.000Z","tags":["kev","public-exploit"],"_patchfirst":{"reason":"kev","priority":74.6,"kev":{"dateAdded":"2025-11-10","ransomware":false},"epss":{"score":0.35577,"percentile":0.98454},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-21043#kev","url":"https://patchfirst.co/cve/CVE-2025-21043/","title":"[KEV] CVE-2025-21043: Samsung Mobile Devices Out-of-Bounds Write Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2025-10-02. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.6% of CVEs). CVSS 9.8 CRITICAL. Priority 61.4 of 100.","summary":"Samsung Mobile Devices Out-of-Bounds Write Vulnerability","date_published":"2025-10-02T00:00:00.000Z","date_modified":"2026-10-08T12:54:41.000Z","tags":["kev"],"_patchfirst":{"reason":"kev","priority":61.4,"kev":{"dateAdded":"2025-10-02","ransomware":false},"epss":{"score":0.02216,"percentile":0.82617},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-34068","url":"https://patchfirst.co/cve/CVE-2025-34068/","title":"CVE-2025-34068: Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters","content_text":"Samsung Electronics · WLAN AP WEA453e. Not in CISA KEV. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. Priority 59.1 of 100.","summary":"Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters","date_published":"2025-07-15T00:00:00.000Z","date_modified":"2026-05-15T11:14:35.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":59.1,"kev":null,"epss":{"score":0.0101,"percentile":0.63088},"cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"vendor":"Samsung Electronics","product":"WLAN AP WEA453e","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-4632#kev","url":"https://patchfirst.co/cve/CVE-2025-4632/","title":"[KEV] CVE-2025-4632: Samsung MagicINFO 9 Server Path Traversal Vulnerability","content_text":"Samsung · MagicINFO 9 Server. In CISA KEV since 2025-05-22. ENISA EUVD lists it as exploited. EPSS 24.1% (higher than 97.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter; T1496 Resource Hijacking; T1608.001 Upload Malware. Priority 69.4 of 100.","summary":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","date_published":"2025-05-22T00:00:00.000Z","date_modified":"2026-06-17T09:33:39.000Z","tags":["kev","public-exploit","T1068","T1059","T1496","T1608.001"],"_patchfirst":{"reason":"kev","priority":69.4,"kev":{"dateAdded":"2025-05-22","ransomware":false},"epss":{"score":0.24066,"percentile":0.97843},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Samsung","product":"MagicINFO 9 Server","techniqueIds":["T1068","T1059","T1496","T1608.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-22265#kev","url":"https://patchfirst.co/cve/CVE-2022-22265/","title":"[KEV] CVE-2022-22265: Samsung Mobile Devices Use-After-Free Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2023-09-18. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 33% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 50.1 of 100.","summary":"Samsung Mobile Devices Use-After-Free Vulnerability","date_published":"2023-09-18T00:00:00.000Z","date_modified":"2026-06-17T04:28:08.000Z","tags":["kev","T1068","T1211"],"_patchfirst":{"reason":"kev","priority":50.1,"kev":{"dateAdded":"2023-09-18","ransomware":false},"epss":{"score":0.00389,"percentile":0.32967},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-25372#kev","url":"https://patchfirst.co/cve/CVE-2021-25372/","title":"[KEV] CVE-2021-25372: Samsung Mobile Devices Improper Boundary Check Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 56.7% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 54.0 of 100.","summary":"Samsung Mobile Devices Improper Boundary Check Vulnerability","date_published":"2023-06-29T00:00:00.000Z","date_modified":"2026-06-17T03:41:57.000Z","tags":["kev","T1068","T1005"],"_patchfirst":{"reason":"kev","priority":54,"kev":{"dateAdded":"2023-06-29","ransomware":false},"epss":{"score":0.00804,"percentile":0.56707},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1068","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-25371#kev","url":"https://patchfirst.co/cve/CVE-2021-25371/","title":"[KEV] CVE-2021-25371: Samsung Mobile Devices Unspecified Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 54.0 of 100.","summary":"Samsung Mobile Devices Unspecified Vulnerability","date_published":"2023-06-29T00:00:00.000Z","date_modified":"2026-06-17T03:41:57.000Z","tags":["kev","T1078","T1059"],"_patchfirst":{"reason":"kev","priority":54,"kev":{"dateAdded":"2023-06-29","ransomware":false},"epss":{"score":0.00802,"percentile":0.56608},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1078","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-25487#kev","url":"https://patchfirst.co/cve/CVE-2021-25487/","title":"[KEV] CVE-2021-25487: Samsung Mobile Devices Out-of-Bounds Read Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.6% (higher than 50.4% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 53.5 of 100.","summary":"Samsung Mobile Devices Out-of-Bounds Read Vulnerability","date_published":"2023-06-29T00:00:00.000Z","date_modified":"2026-06-17T03:42:10.000Z","tags":["kev","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":53.5,"kev":{"dateAdded":"2023-06-29","ransomware":false},"epss":{"score":0.00635,"percentile":0.50408},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1068","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-25489#kev","url":"https://patchfirst.co/cve/CVE-2021-25489/","title":"[KEV] CVE-2021-25489: Samsung Mobile Devices Improper Input Validation Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.5% (higher than 44.8% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 50.8 of 100.","summary":"Samsung Mobile Devices Improper Input Validation Vulnerability","date_published":"2023-06-29T00:00:00.000Z","date_modified":"2026-06-17T03:42:10.000Z","tags":["kev","T1068","T1499.004"],"_patchfirst":{"reason":"kev","priority":50.8,"kev":{"dateAdded":"2023-06-29","ransomware":false},"epss":{"score":0.00531,"percentile":0.44843},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1068","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-25394#kev","url":"https://patchfirst.co/cve/CVE-2021-25394/","title":"[KEV] CVE-2021-25394: Samsung Mobile Devices Race Condition Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 34.4% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 49.4 of 100.","summary":"Samsung Mobile Devices Race Condition Vulnerability","date_published":"2023-06-29T00:00:00.000Z","date_modified":"2026-06-17T03:42:00.000Z","tags":["kev","T1068","T1005"],"_patchfirst":{"reason":"kev","priority":49.4,"kev":{"dateAdded":"2023-06-29","ransomware":false},"epss":{"score":0.00401,"percentile":0.34376},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1068","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-25395#kev","url":"https://patchfirst.co/cve/CVE-2021-25395/","title":"[KEV] CVE-2021-25395: Samsung Mobile Devices Race Condition Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 30.5% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 48.6 of 100.","summary":"Samsung Mobile Devices Race Condition Vulnerability","date_published":"2023-06-29T00:00:00.000Z","date_modified":"2026-06-17T03:42:00.000Z","tags":["kev","T1068","T1211"],"_patchfirst":{"reason":"kev","priority":48.6,"kev":{"dateAdded":"2023-06-29","ransomware":false},"epss":{"score":0.00366,"percentile":0.30499},"cvss":{"score":6.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1068","T1211"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-21492#kev","url":"https://patchfirst.co/cve/CVE-2023-21492/","title":"[KEV] CVE-2023-21492: Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2023-05-19. ENISA EUVD lists it as exploited. EPSS 2.6% (higher than 85% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1078 Valid Accounts; T1082 System Information Discovery. Priority 58.1 of 100.","summary":"Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability","date_published":"2023-05-19T00:00:00.000Z","date_modified":"2026-06-17T05:32:48.000Z","tags":["kev","T1078","T1082"],"_patchfirst":{"reason":"kev","priority":58.1,"kev":{"dateAdded":"2023-05-19","ransomware":false},"epss":{"score":0.02554,"percentile":0.85035},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1078","T1082"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-25337#kev","url":"https://patchfirst.co/cve/CVE-2021-25337/","title":"[KEV] CVE-2021-25337: Samsung Mobile Devices Improper Access Control Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 2.8% (higher than 86.5% of CVEs). CVSS 7.1 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1005 Data from Local System. Priority 65.3 of 100.","summary":"Samsung Mobile Devices Improper Access Control Vulnerability","date_published":"2022-11-08T00:00:00.000Z","date_modified":"2026-06-17T03:41:53.000Z","tags":["kev","public-exploit","T1204.002","T1005"],"_patchfirst":{"reason":"kev","priority":65.3,"kev":{"dateAdded":"2022-11-08","ransomware":false},"epss":{"score":0.02807,"percentile":0.86484},"cvss":{"score":7.1,"severity":"HIGH","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1204.002","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-25369#kev","url":"https://patchfirst.co/cve/CVE-2021-25369/","title":"[KEV] CVE-2021-25369: Samsung Mobile Devices Improper Access Control Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 65% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 54.9 of 100.","summary":"Samsung Mobile Devices Improper Access Control Vulnerability","date_published":"2022-11-08T00:00:00.000Z","date_modified":"2026-06-17T03:41:57.000Z","tags":["kev","T1068","T1005"],"_patchfirst":{"reason":"kev","priority":54.9,"kev":{"dateAdded":"2022-11-08","ransomware":false},"epss":{"score":0.01079,"percentile":0.65036},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1068","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-25370#kev","url":"https://patchfirst.co/cve/CVE-2021-25370/","title":"[KEV] CVE-2021-25370: Samsung Mobile Devices Memory Corruption Vulnerability","content_text":"Samsung · Mobile Devices. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 59.3% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 52.9 of 100.","summary":"Samsung Mobile Devices Memory Corruption Vulnerability","date_published":"2022-11-08T00:00:00.000Z","date_modified":"2026-06-17T03:41:57.000Z","tags":["kev","T1068","T1499.004"],"_patchfirst":{"reason":"kev","priority":52.9,"kev":{"dateAdded":"2022-11-08","ransomware":false},"epss":{"score":0.0089,"percentile":0.59326},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Samsung","product":"Mobile Devices","techniqueIds":["T1068","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}}]}