Skip to main content
EVULNABLE
Home

Samsung

CVEs currently on EVULNABLE's Priority Feed for Samsung, and this vendor's own CISA KEV history.

CISA KEV additions over time

Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.

20 Apr – 12 Oct; busiest week: 1 added.

Week of 2026-04-20: 1 added to KEV Week of 2026-04-27: 0 added to KEV Week of 2026-05-04: 0 added to KEV Week of 2026-05-11: 0 added to KEV Week of 2026-05-18: 0 added to KEV Week of 2026-05-25: 0 added to KEV Week of 2026-06-01: 0 added to KEV Week of 2026-06-08: 0 added to KEV Week of 2026-06-15: 0 added to KEV Week of 2026-06-22: 0 added to KEV Week of 2026-06-29: 0 added to KEV Week of 2026-07-06: 0 added to KEV Week of 2026-07-13: 0 added to KEV Week of 2026-07-20: 0 added to KEV Week of 2026-07-27: 0 added to KEV Week of 2026-08-03: 0 added to KEV Week of 2026-08-10: 0 added to KEV Week of 2026-08-17: 0 added to KEV Week of 2026-08-24: 0 added to KEV Week of 2026-08-31: 0 added to KEV Week of 2026-09-07: 0 added to KEV Week of 2026-09-14: 0 added to KEV Week of 2026-09-21: 0 added to KEV Week of 2026-09-28: 0 added to KEV Week of 2026-10-05: 0 added to KEV Week of 2026-10-12 (so far): 0 added to KEV
1
0
May
Jun
Jul
Aug
Sep
Oct
  • Not ransomware-linked
  • Ransomware-linked
  • This week (so far)
CISA KEV additions per week, last 26 weeks
Week ofAdded to KEVRansomware-linked
2026-04-2010
2026-04-2700
2026-05-0400
2026-05-1100
2026-05-1800
2026-05-2500
2026-06-0100
2026-06-0800
2026-06-1500
2026-06-2200
2026-06-2900
2026-07-0600
2026-07-1300
2026-07-2000
2026-07-2700
2026-08-0300
2026-08-1000
2026-08-1700
2026-08-2400
2026-08-3100
2026-09-0700
2026-09-1400
2026-09-2100
2026-09-2800
2026-10-0500
2026-10-12 (so far)00

In EVULNABLE's ranked feed

Showing all 15 Samsung CVEs in EVULNABLE's ranked feed.

#1 88 Immediate CVE-2024-7399 ExigentCISA federal deadline · Overdue by 5 monthsCISA KEV Samsung — Samsung MagicINFO 9 Server Path Traversal Vulnerability KEV, EPSS 91.9%

EVRS 88/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS91.9% · 99.82nd pctlKEV since2026-04-24

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.919.

#2 75 Urgent CVE-2025-21042 CISA federal deadline · Overdue by 11 monthsCISA KEV Samsung — Samsung Mobile Devices Out-of-Bounds Write Vulnerability KEV, EPSS 33.2%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS33.2% · 98.4th pctlKEV since2025-11-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.332.

#3 75 Urgent CVE-2025-4632 KEV since 2025 · listed over a yearCISA KEV Samsung — Samsung MagicINFO 9 Server Path Traversal Vulnerability KEV, EPSS 24.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS24.1% · 97.8th pctlKEV since2025-05-22

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.241.

#4 75 Urgent CVE-2021-25337 KEV since 2022 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Improper Access Control Vulnerability KEV, EPSS 2.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.1 (NVD)EPSS2.8% · 86.3rd pctlKEV since2022-11-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.028.

#5 75 Urgent CVE-2023-21492 KEV since 2023 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability KEV, EPSS 2.6%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS4.4 (NVD)EPSS2.6% · 84.8th pctlKEV since2023-05-19

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.026.

#6 75 Urgent CVE-2025-21043 KEV since 2025 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Out-of-Bounds Write Vulnerability KEV, EPSS 2.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS2.1% · 81.7th pctlKEV since2025-10-02

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.021.

#7 75 Urgent CVE-2021-25369 KEV since 2022 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Improper Access Control Vulnerability KEV, EPSS 1.1%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.5 (NVD)EPSS1.1% · 64.5th pctlKEV since2022-11-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.011.

#8 75 Urgent CVE-2021-25370 KEV since 2022 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Memory Corruption Vulnerability KEV, EPSS 0.9%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS4.4 (NVD)EPSS0.9% · 58.6th pctlKEV since2022-11-08

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.009.

#9 75 Urgent CVE-2021-25372 KEV since 2023 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Improper Boundary Check Vulnerability KEV, EPSS 0.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.7 (NVD)EPSS0.8% · 55.9th pctlKEV since2023-06-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.008.

#10 75 Urgent CVE-2021-25371 KEV since 2023 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Unspecified Vulnerability KEV, EPSS 0.8%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.7 (NVD)EPSS0.8% · 55.8th pctlKEV since2023-06-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.008.

#11 75 Urgent CVE-2021-25487 KEV since 2023 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Out-of-Bounds Read Vulnerability KEV, EPSS 0.6%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS0.6% · 49.4th pctlKEV since2023-06-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.006.

#12 75 Urgent CVE-2021-25489 KEV since 2023 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Improper Input Validation Vulnerability KEV, EPSS 0.5%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS5.5 (NVD)EPSS0.5% · 43.6th pctlKEV since2023-06-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.005.

#13 75 Urgent CVE-2021-25394 KEV since 2023 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Race Condition Vulnerability KEV, EPSS 0.4%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.4 (NVD)EPSS0.4% · 32.8th pctlKEV since2023-06-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.004.

#14 75 Urgent CVE-2022-22265 KEV since 2023 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Use-After-Free Vulnerability KEV, EPSS 0.4%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS0.4% · 31.4th pctlKEV since2023-09-18

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.004.

#15 75 Urgent CVE-2021-25395 KEV since 2023 · listed over a yearCISA KEV Samsung — Samsung Mobile Devices Race Condition Vulnerability KEV, EPSS 0.4%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS6.4 (NVD)EPSS0.4% · 28.9th pctlKEV since2023-06-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.004.