Samsung vulnerabilities17 known to be exploited.
Samsung has 1,306 published vulnerabilities across 2,960 products in our catalogue. 17 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Android, with 375. If you run Samsung software, patch the exploited flaws first.
The most recent Samsung flaw added to the known-exploited list is CVE-2024-7399, on 24 April 2026. We keep watching the known-exploited list.
Which Samsung products have the most vulnerabilities?
Android leads with 375 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Samsung vulnerabilities are being exploited?
17 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.
- 8.8Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so.
- 8.8Samsung Mobile Devices Out-of-Bounds Write Vulnerability
Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.
- 9.8Samsung MagicINFO 9 Server Path Traversal Vulnerability
Samsung MagicINFO 9 Server contains a path traversal vulnerability that allows an attacker to write arbitrary file as system authority.
- 5.0Samsung Mobile Devices Use-After-Free Vulnerability
Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.
- 7.3Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference...
- 6.4Samsung Mobile Devices Race Condition Vulnerability
Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
- 6.4Samsung Mobile Devices Race Condition Vulnerability
Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
Which Samsung flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 79%CVE-2017-17692High
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property.
- 60%CVE-2012-4333Critical
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in Samsung NET-i viewer 1.37.120316 allow remote attackers to execute...
- 51%CVE-2015-8279High
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script.
- 33%CVE-2023-24033High
The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module,...
- 32%CVE-2012-3807Critical
Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.
- 30%CVE-2017-16524High
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a...
All Samsung products we track.
178 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Androidandroid375 vulnerabilities10 versions
- Notesnotes41 vulnerabilities10 versions
- Sth-Eth-250 Firmwaresth-eth-250_firmware40 vulnerabilities1 version
- X14j Firmwarex14j_firmware37 vulnerabilities3 versions
- Samsung Mobilesamsung_mobile28 vulnerabilities12 versions
- Galaxy Storegalaxy_store26 vulnerabilities11 versions
- Accountaccount24 vulnerabilities11 versions
- Internetinternet24 vulnerabilities10 versions
- Smartthingssmartthings20 vulnerabilities8 versions
- Galaxy S6 Firmwaregalaxy_s6_firmware13 vulnerabilities2 versions
- Magicinfo 9 Servermagicinfo_9_server13 vulnerabilities11 versions
- Mtowermtower13 vulnerabilities4 versions
- Healthhealth11 vulnerabilities9 versions
- Kieskies11 vulnerabilities5 versions
- Passpass10 vulnerabilities4 versions
- Galaxy S4 Firmwaregalaxy_s4_firmware8 vulnerabilities3 versions
- Membersmembers8 vulnerabilities7 versions
- Syncthru Web Servicesyncthru_web_service8 vulnerabilities2 versions
- Magicianmagician7 vulnerabilities7 versions
- Blockchain Keystoreblockchain_keystore6 vulnerabilities4 versions
- Cloudcloud6 vulnerabilities5 versions
- Emailemail6 vulnerabilities7 versions
- Galaxy Watch Plugingalaxy_watch_plugin6 vulnerabilities3 versions
- Samsung Blockchain Keystoresamsung_blockchain_keystore6 vulnerabilities1 version
This directory lists the 178 Samsung products with at least one tracked version, of 2,960 in our catalogue.
Running Samsung? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.
- Matched to
- Magicinfo 9 Server on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 1,306 published vulnerabilities across 2,960 products and 698 versions from Samsung. The most recent Samsung flaw added to the known-exploited list is CVE-2024-7399, on 24 April 2026.
17 Samsung vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2024-7399, CVE-2025-21042 and CVE-2025-21043. The full list is on this page.
Android, with 375 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Samsung products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.