CISA KEV by vendor
Samsung vulnerabilities in the CISA KEV catalogue
15 Samsung entries in CISA's Known Exploited Vulnerabilities catalogue, 0 of them (0 percent) known to have been used in ransomware campaigns. First added 8 November 2022, latest 24 April 2026.
Data status: a source is stale
Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually
15entries, 0.8% of the catalogue
0known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days
Products
| Product, as CISA names it | Entries |
|---|---|
| Mobile Devices | 13 |
| MagicINFO 9 Server | 2 |
Latest additions
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-7399 | MagicINFO 9 Server | 2026-04-24 | 2026-05-08 | Unknown | 9.8 Critical | 91.9% | Auto, total | 3 days + triage |
| CVE-2025-21042 | Mobile Devices | 2025-11-10 | 2025-12-01 | Unknown | 9.8 Critical | 35.5% | Not auto, total | 3 days + triage |
| CVE-2025-21043 | Mobile Devices | 2025-10-02 | 2025-10-23 | Unknown | 9.8 Critical | 2.2% | Not auto, total | 3 days + triage |
| CVE-2025-4632 | MagicINFO 9 Server | 2025-05-22 | 2025-06-12 | Unknown | 9.8 Critical | 24.0% | Auto, total | 3 days + triage |
| CVE-2022-22265 | Mobile Devices | 2023-09-18 | 2023-10-09 | Unknown | 7.8 High | 0.4% | Not auto, total | 3 days + triage |
| CVE-2021-25489 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 5.5 Medium | 0.5% | Not auto, partial | 14 days |
| CVE-2021-25487 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 7.8 High | 0.6% | Not auto, total | 3 days + triage |
| CVE-2021-25395 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 6.4 Medium | 0.3% | Not auto, total | 3 days + triage |
| CVE-2021-25394 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 6.4 Medium | 0.4% | Not auto, total | 3 days + triage |
| CVE-2021-25372 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 6.7 Medium | 0.8% | Not auto, total | 3 days + triage |
All 15 entries
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-7399 | MagicINFO 9 Server | 2026-04-24 | 2026-05-08 | Unknown | 9.8 Critical | 91.9% | Auto, total | 3 days + triage |
| CVE-2025-21042 | Mobile Devices | 2025-11-10 | 2025-12-01 | Unknown | 9.8 Critical | 35.5% | Not auto, total | 3 days + triage |
| CVE-2025-21043 | Mobile Devices | 2025-10-02 | 2025-10-23 | Unknown | 9.8 Critical | 2.2% | Not auto, total | 3 days + triage |
| CVE-2025-4632 | MagicINFO 9 Server | 2025-05-22 | 2025-06-12 | Unknown | 9.8 Critical | 24.0% | Auto, total | 3 days + triage |
| CVE-2022-22265 | Mobile Devices | 2023-09-18 | 2023-10-09 | Unknown | 7.8 High | 0.4% | Not auto, total | 3 days + triage |
| CVE-2021-25489 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 5.5 Medium | 0.5% | Not auto, partial | 14 days |
| CVE-2021-25487 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 7.8 High | 0.6% | Not auto, total | 3 days + triage |
| CVE-2021-25395 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 6.4 Medium | 0.3% | Not auto, total | 3 days + triage |
| CVE-2021-25394 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 6.4 Medium | 0.4% | Not auto, total | 3 days + triage |
| CVE-2021-25372 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 6.7 Medium | 0.8% | Not auto, total | 3 days + triage |
| CVE-2021-25371 | Mobile Devices | 2023-06-29 | 2023-07-20 | Unknown | 6.7 Medium | 0.8% | Not auto, total | 3 days + triage |
| CVE-2023-21492 | Mobile Devices | 2023-05-19 | 2023-06-09 | Unknown | 4.4 Medium | 2.5% | Not auto, partial | 14 days |
| CVE-2021-25370 | Mobile Devices | 2022-11-08 | 2022-11-29 | Unknown | 4.4 Medium | 0.8% | Not auto, total | 3 days + triage |
| CVE-2021-25369 | Mobile Devices | 2022-11-08 | 2022-11-29 | Unknown | 5.5 Medium | 1.0% | Not auto, partial | 14 days |
| CVE-2021-25337 | Mobile Devices | 2022-11-08 | 2022-11-29 | Unknown | 7.1 High | 2.8% | Not auto, partial | 14 days |
Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Samsung in the tracker by date, score or status.
Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.
