Vendor
Samsung Mobile
1,694 known vulnerabilities in products by Samsung Mobile, 16 of them actively exploited (CISA KEV).
Key figures
1,694
Vulnerabilities
16
Actively exploited (KEV)
0
Used by ransomware
162
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-4632 | Samsung MagicINFO 9 Server Path Traversal Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2025-21042 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2024-7399 | Samsung MagicINFO 9 Server Path Traversal Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2016-1010 | Adobe Flash Player and AIR Integer Overflow Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2025-21043 | Samsung Mobile Devices Out-of-Bounds Write Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2025-48595 | Android Framework Integer Overflow Vulnerability In CISA KEV | 8.4 | |
| Critical | CVE-2023-21492 | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability In CISA KEV | 4.4 | |
| Critical | CVE-2021-25337 | Samsung Mobile Devices Improper Access Control Vulnerability In CISA KEV | 4.4 | |
| Critical | CVE-2021-25369 | Samsung Mobile Devices Improper Access Control Vulnerability In CISA KEV | 6.2 | |
| Critical | CVE-2021-25370 | Samsung Mobile Devices Memory Corruption Vulnerability In CISA KEV | 6.1 | |
| Critical | CVE-2021-25487 | Samsung Mobile Devices Out-of-Bounds Read Vulnerability In CISA KEV | 7.3 | |
| Critical | CVE-2021-25372 | Samsung Mobile Devices Improper Boundary Check Vulnerability In CISA KEV | 6.1 | |
| Critical | CVE-2021-25371 | Samsung Mobile Devices Unspecified Vulnerability In CISA KEV | 6.1 | |
| Critical | CVE-2021-25394 | Samsung Mobile Devices Race Condition Vulnerability In CISA KEV | 6.4 | |
| Critical | CVE-2021-25395 | Samsung Mobile Devices Race Condition Vulnerability In CISA KEV | 6.4 | |
| Critical | CVE-2021-25489 | Samsung Mobile Devices Improper Input Validation Vulnerability In CISA KEV | 3.3 | |
| Critical | CVE-2023-20713 | Samsung Android: security vulnerability | — | |
| Critical | CVE-2026-0058 | Samsung Android: security vulnerability | — | |
| Critical | CVE-2025-54453 | Samsung Electronics MagicINFO 9 Server: Path Traversal | 8.8 | |
| High | CVE-2025-54441 | Samsung Electronics MagicINFO 9 Server: Unrestricted Upload of File with Dangerous Type | 8.8 | |
| High | CVE-2025-54439 | Samsung Electronics MagicINFO 9 Server: Unrestricted Upload of File with Dangerous Type | 8.8 | |
| Critical | CVE-2012-3807 | Samsung KIES: security vulnerability | 9.8 | |
| Critical | CVE-2025-54445 | Samsung Electronics MagicINFO 9 Server: Improper Restriction of XML External Entity Reference | 8.2 | |
| Critical | CVE-2015-5473 | Samsung SyncThru 6: Path Traversal | 9.8 | |
| Critical | CVE-2023-26498 | Samsung Exynos 1080 firmware: Memory Corruption | 8.6 |
News
- Flaws in Linux Kernel and Android Exploited, Added to CISA KEVsans-newsbites-mail,
- Google June 2026 Android Update Patches 124 Flaws, One Actively Exploitedthehackernews,
- CISA Adds Four CVEs to KEV; All Were Disclosed a Year or More Agosans-newsbites-mail,