Vendor
Samsung: actively exploited vulnerabilities
15 vulnerabilities in Samsung products are listed in CISA’s catalog of actively exploited vulnerabilities. Latest addition on April 24, 2026: CVE-2024-7399 (MagicINFO 9 Server).
- 15 exploited vulnerabilities in the catalog
- 2 added in the last 12 months
- 0 used by ransomware
- 2 products affected
Affected products
- Mobile Devices13
- MagicINFO 9 Server2
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2026 1 vulnerability
-
CVE-2024-7399Samsung MagicINFO 9 Server Path Traversal Vulnerability
2025 3 vulnerabilities
-
CVE-2025-21042Samsung Mobile Devices Out-of-Bounds Write Vulnerability
-
CVE-2025-21043Samsung Mobile Devices Out-of-Bounds Write Vulnerability
-
CVE-2025-4632Samsung MagicINFO 9 Server Path Traversal Vulnerability
2023 8 vulnerabilities
-
CVE-2022-22265Samsung Mobile Devices Use-After-Free Vulnerability
-
CVE-2021-25489Samsung Mobile Devices Improper Input Validation Vulnerability
-
CVE-2021-25487Samsung Mobile Devices Out-of-Bounds Read Vulnerability
-
CVE-2021-25395Samsung Mobile Devices Race Condition Vulnerability
-
CVE-2021-25394Samsung Mobile Devices Race Condition Vulnerability
-
CVE-2021-25372Samsung Mobile Devices Improper Boundary Check Vulnerability
-
CVE-2021-25371Samsung Mobile Devices Unspecified Vulnerability
-
CVE-2023-21492Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
2022 3 vulnerabilities
-
CVE-2021-25370Samsung Mobile Devices Memory Corruption Vulnerability
-
CVE-2021-25369Samsung Mobile Devices Improper Access Control Vulnerability
-
CVE-2021-25337Samsung Mobile Devices Improper Access Control Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.