https://patchfirst.co/vendor/samsung/New and newly exploited Samsung CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2024-7399/CVE-2024-7399#kevFri, 24 Apr 2026 00:00:00 GMTSamsung · MagicINFO 9 Server. In CISA KEV since 2026-04-24. ENISA EUVD lists it as exploited. EPSS 91.9% (higher than 99.82% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 69.8 of 100.kevpublic-exploitT1190T1105https://patchfirst.co/cve/CVE-2025-21042/CVE-2025-21042#kevMon, 10 Nov 2025 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2025-11-10. ENISA EUVD lists it as exploited. EPSS 35.6% (higher than 98.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 74.6 of 100.kevpublic-exploithttps://patchfirst.co/cve/CVE-2025-21043/CVE-2025-21043#kevThu, 02 Oct 2025 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2025-10-02. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.6% of CVEs). CVSS 9.8 CRITICAL. Priority 61.4 of 100.kevhttps://patchfirst.co/cve/CVE-2025-34068/CVE-2025-34068Tue, 15 Jul 2025 00:00:00 GMTSamsung Electronics · WLAN AP WEA453e. Not in CISA KEV. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. Priority 59.1 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-4632/CVE-2025-4632#kevThu, 22 May 2025 00:00:00 GMTSamsung · MagicINFO 9 Server. In CISA KEV since 2025-05-22. ENISA EUVD lists it as exploited. EPSS 24.1% (higher than 97.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter; T1496 Resource Hijacking; T1608.001 Upload Malware. Priority 69.4 of 100.kevpublic-exploitT1068T1059T1496T1608.001https://patchfirst.co/cve/CVE-2022-22265/CVE-2022-22265#kevMon, 18 Sep 2023 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2023-09-18. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 33% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 50.1 of 100.kevT1068T1211https://patchfirst.co/cve/CVE-2021-25372/CVE-2021-25372#kevThu, 29 Jun 2023 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 56.7% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 54.0 of 100.kevT1068T1005https://patchfirst.co/cve/CVE-2021-25371/CVE-2021-25371#kevThu, 29 Jun 2023 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 56.6% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 54.0 of 100.kevT1078T1059https://patchfirst.co/cve/CVE-2021-25487/CVE-2021-25487#kevThu, 29 Jun 2023 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.6% (higher than 50.4% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 53.5 of 100.kevT1068T1059https://patchfirst.co/cve/CVE-2021-25489/CVE-2021-25489#kevThu, 29 Jun 2023 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.5% (higher than 44.8% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 50.8 of 100.kevT1068T1499.004https://patchfirst.co/cve/CVE-2021-25394/CVE-2021-25394#kevThu, 29 Jun 2023 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 34.4% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 49.4 of 100.kevT1068T1005https://patchfirst.co/cve/CVE-2021-25395/CVE-2021-25395#kevThu, 29 Jun 2023 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2023-06-29. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 30.5% of CVEs). CVSS 6.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1211 Exploitation for Stealth. Priority 48.6 of 100.kevT1068T1211https://patchfirst.co/cve/CVE-2023-21492/CVE-2023-21492#kevFri, 19 May 2023 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2023-05-19. ENISA EUVD lists it as exploited. EPSS 2.6% (higher than 85% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1078 Valid Accounts; T1082 System Information Discovery. Priority 58.1 of 100.kevT1078T1082https://patchfirst.co/cve/CVE-2021-25337/CVE-2021-25337#kevTue, 08 Nov 2022 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 2.8% (higher than 86.5% of CVEs). CVSS 7.1 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1005 Data from Local System. Priority 65.3 of 100.kevpublic-exploitT1204.002T1005https://patchfirst.co/cve/CVE-2021-25369/CVE-2021-25369#kevTue, 08 Nov 2022 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 65% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 54.9 of 100.kevT1068T1005https://patchfirst.co/cve/CVE-2021-25370/CVE-2021-25370#kevTue, 08 Nov 2022 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 59.3% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 52.9 of 100.kevT1068T1499.004