Vendor

Samsung

15 of 16 Samsung CVEs in Patchfirst (94%) are in of vulnerabilities exploited in the wild.

CVEs: 16
In CISA KEV: 1594%
Known ransomware use: 0
Median days to KEV: 616; from publication
Latest KEV listing: 24 Apr 2026

Watch Samsung Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Mobile Devices In KEV: 13 CVEs: 13
MagicINFO 9 Server In KEV: 2 CVEs: 2
WLAN AP WEA453e In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with Samsung CVEs

TechniqueCVEs
T1068Exploitation for Privilege Escalation CVEs: 9
T1005Data from Local System CVEs: 4
T1059Command and Scripting Interpreter CVEs: 3
T1078Valid Accounts CVEs: 2
T1499.004Application or System Exploitation CVEs: 2

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/samsung.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Samsung CVEs linked to the technique. Each link’s provenance is on the CVE page.

Samsung CVEs

16 CVEs, by priority

CVE-2025-21042Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung · Mobile DevicesKEVPublic exploitCritical · 9.8
35.6%Top 1.5%
74.6priority
CVE-2024-7399Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung · MagicINFO 9 ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1105Ingress Tool Transfer
91.9%Top 0.18%
69.8priority
CVE-2025-4632Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung · MagicINFO 9 ServerKEVPublic exploitCritical · 9.8T1608.001Upload Malware T1059Command and Scripting Interpreter+2 more
24.1%Top 2.2%
69.4priority
CVE-2021-25337Samsung Mobile Devices Improper Access Control Vulnerability
Samsung · Mobile DevicesKEVPublic exploitHigh · 7.1T1204.002Malicious File T1005Data from Local System
2.8%Top 14%
65.3priority
CVE-2025-21043Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung · Mobile DevicesKEVCritical · 9.8
2.2%Top 17%
61.4priority
CVE-2025-34068Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters
Samsung Electronics · WLAN AP WEA453ePublic exploitCritical · 9.3
1.0%Top 37%
59.1priority
CVE-2023-21492Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Samsung · Mobile DevicesKEVMedium · 4.4T1078Valid Accounts T1082System Information Discovery
2.6%Top 15%
58.1priority
CVE-2021-25369Samsung Mobile Devices Improper Access Control Vulnerability
Samsung · Mobile DevicesKEVMedium · 5.5T1068Exploitation for Privilege Escalation T1005Data from Local System
1.1%Top 35%
54.9priority
CVE-2021-25372Samsung Mobile Devices Improper Boundary Check Vulnerability
Samsung · Mobile DevicesKEVMedium · 6.7T1068Exploitation for Privilege Escalation T1005Data from Local System
0.8%Top 43%
54.0priority
CVE-2021-25371Samsung Mobile Devices Unspecified Vulnerability
Samsung · Mobile DevicesKEVMedium · 6.7T1078Valid Accounts T1059Command and Scripting Interpreter
0.8%Top 43%
54.0priority
CVE-2021-25487Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Samsung · Mobile DevicesKEVHigh · 7.8T1059Command and Scripting Interpreter T1068Exploitation for Privilege Escalation
0.6%Top 50%
53.5priority
CVE-2021-25370Samsung Mobile Devices Memory Corruption Vulnerability
Samsung · Mobile DevicesKEVMedium · 4.4T1068Exploitation for Privilege Escalation T1499.004Application or System Exploitation
0.9%Top 41%
52.9priority
CVE-2021-25489Samsung Mobile Devices Improper Input Validation Vulnerability
Samsung · Mobile DevicesKEVMedium · 5.5T1068Exploitation for Privilege Escalation T1499.004Application or System Exploitation
0.5%Top 55%
50.8priority
CVE-2022-22265Samsung Mobile Devices Use-After-Free Vulnerability
Samsung · Mobile DevicesKEVHigh · 7.8T1068Exploitation for Privilege Escalation T1211Exploitation for Stealth
0.4%Top 67%
50.1priority
CVE-2021-25394Samsung Mobile Devices Race Condition Vulnerability
Samsung · Mobile DevicesKEVMedium · 6.4T1068Exploitation for Privilege Escalation T1005Data from Local System
0.4%Top 66%
49.4priority
CVE-2021-25395Samsung Mobile Devices Race Condition Vulnerability
Samsung · Mobile DevicesKEVMedium · 6.4T1068Exploitation for Privilege Escalation T1211Exploitation for Stealth
0.4%Top 70%
48.6priority