Samsung has 91 CVEs on record between 2021 and 2026. Disclosure cadence is accelerating: 46 in the last 90 days against 2 in the 90 before. The busiest recent month was September 2026 with 42. The median CVSS is 5.5 (medium), with 2 rated critical. 3% have been exploited in the wild, in line with the corpus average. The median gap from publication to a KEV listing is 59 days (3 cases). The dominant weakness classes are CWE-787 (20) and CWE-125 (10). Most affected products: android (39), notes (8), Exynos 1330 firmware (7).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 3% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- 59 d median(3)
- Last 90 days
- 46 prev 2
Weakness classes
Products
- android 39
- notes 8
- Exynos 1330 firmware 7
- rlottie 6
- Exynos 1280 firmware 5
- Exynos 850 firmware 4
91
Total CVEs
2
Critical
3
CISA KEV
3
Exploited
Worst active — by depth score
CVE-2024-7399High· 8.8Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.92CVE-2025-21042High· 8.8Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.81CVE-2025-21043High· 8.8Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.74CVE-2026-21096Critical· 9.8Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.66CVE-2026-21095Critical· 9.8Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.54
Samsung vulnerabilities
CVEs affecting Samsung, newest first. Open any entry for full detail, references, and exploit status.
91 CVEsRSS