Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Samsung: actively exploited vulnerabilities

15 vulnerabilities in Samsung products (Mobile Devices (Galaxy), MagicINFO Server) are in CISA’s catalog of exploited vulnerabilities. Last added: April 24, 2026.

Samsung security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Samsung category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Mobile Devices (Galaxy) 13 vulnerabilities · Phones and tablets
  • MagicINFO Server 2 vulnerabilities · Business apps and data

Name used by CISA: Samsung. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Samsung list.

  1. Rank 1Samsung MagicINFO Server

    CVE-2024-7399

    CVE from 2024, added in 2026

    Samsung MagicINFO 9 Server Path Traversal Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Apr 24, 2026
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Samsung Mobile Devices (Galaxy)

    CVE-2025-21042

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Nov 10, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  3. Rank 3Samsung Mobile Devices (Galaxy)

    CVE-2025-21043

    Samsung Mobile Devices Out-of-Bounds Write Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 2, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  4. Rank 4Samsung MagicINFO Server

    CVE-2025-4632

    Samsung MagicINFO 9 Server Path Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 22, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  5. Rank 5Samsung Mobile Devices (Galaxy)

    CVE-2022-22265

    Samsung Mobile Devices Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 18, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  6. Rank 6Samsung Mobile Devices (Galaxy)

    CVE-2021-25487

    CVE from 2021, added in 2023

    Samsung Mobile Devices Out-of-Bounds Read Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  7. Rank 7Samsung Mobile Devices (Galaxy)

    CVE-2021-25337

    Samsung Mobile Devices Improper Access Control Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 8, 2022
    CISA deadline
    21 days
    CVSS severity
    7.1 (high)

  8. Rank 8Samsung Mobile Devices (Galaxy)

    CVE-2021-25371

    CVE from 2021, added in 2023

    Samsung Mobile Devices Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    6.7 (medium)

  9. Rank 9Samsung Mobile Devices (Galaxy)

    CVE-2021-25372

    CVE from 2021, added in 2023

    Samsung Mobile Devices Improper Boundary Check Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    6.7 (medium)

  10. Rank 10Samsung Mobile Devices (Galaxy)

    CVE-2021-25394

    CVE from 2021, added in 2023

    Samsung Mobile Devices Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    6.4 (medium)
Show 5 more vulnerabilities

  1. Rank 11Samsung Mobile Devices (Galaxy)

    CVE-2021-25395

    CVE from 2021, added in 2023

    Samsung Mobile Devices Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    6.4 (medium)

  2. Rank 12Samsung Mobile Devices (Galaxy)

    CVE-2021-25489

    CVE from 2021, added in 2023

    Samsung Mobile Devices Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 29, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  3. Rank 13Samsung Mobile Devices (Galaxy)

    CVE-2021-25369

    Samsung Mobile Devices Improper Access Control Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 8, 2022
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  4. Rank 14Samsung Mobile Devices (Galaxy)

    CVE-2023-21492

    Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 19, 2023
    CISA deadline
    21 days
    CVSS severity
    4.4 (medium)

  5. Rank 15Samsung Mobile Devices (Galaxy)

    CVE-2021-25370

    Samsung Mobile Devices Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 8, 2022
    CISA deadline
    21 days
    CVSS severity
    4.4 (medium)

Follow and verify

Get new Samsung vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.