samsung internet

Name: samsung internet
Brand: samsung

productUS

cpe:2.3:a:samsung:internet:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical5high20medium3low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-32407US	—	0.30% (22nd)	Exploit	no fix	2025-05-16	= 5.0.9
CVE-2022-22290US	medium6.5	0.79% (56th)	—	16.0.6.23	2022-01-14	< 16.0.6.23
CVE-2021-25466US	medium5.9	0.77% (55th)	—	15.0.2.47	2021-09-09	< 15.0.2.47
CVE-2021-25419US	medium6.5	0.76% (55th)	—	14.0.1.62	2021-06-11	< 14.0.1.62
CVE-2021-25445US	medium5.3	0.75% (55th)	—	14.2	2021-08-05	< 14.2
CVE-2023-30674US	medium6.5OT elevated	0.58% (48th)	—	21.0.0.41	2023-07-06	< 21.0.0.41
CVE-2022-27839US	medium4.0	0.57% (47th)	—	16.2.1	2022-04-11	< 16.2.1
CVE-2022-30738US	medium4.3	0.56% (47th)	—	17.0.1.69	2022-06-07	< 17.0.1.69
CVE-2021-25354US	medium5.3	0.47% (41st)	—	13.2.1.46	2021-03-25	< 13.2.1.46
CVE-2021-25520US	medium6.1	0.43% (37th)	—	16.0.2	2021-12-08	< 16.0.2
CVE-2024-20829US	medium5.3	0.35% (28th)	—	no fix	2024-03-05	= 24.0
CVE-2021-25366US	low2.9	0.27% (19th)	—	13.2.1.70	2021-03-25	< 13.2.1.70
CVE-2021-25348US	low2.4	0.27% (19th)	—	13.0.1.60	2021-03-04	< 13.0.1.60
CVE-2022-39873US	medium4.6	0.26% (17th)	—	18.0.4.14	2022-10-07	< 18.0.4.14
CVE-2024-20828US	medium4.6OT elevated	0.24% (15th)	—	24.0	2024-02-06	< 24.0
CVE-2021-25400US	high7.8	0.23% (13th)	—	14.0.1.20	2021-06-11	< 14.0.1.20
CVE-2023-30704US	medium4.6	0.23% (14th)	—	22.0.0.35	2023-08-10	< 22.0.0.35
CVE-2021-25418US	high7.8OT elevated	0.23% (13th)	—	14.0.1.62	2021-06-11	< 14.0.1.62
CVE-2022-22284US	medium5.5	0.22% (13th)	—	16.0.2.19	2022-01-10	< 16.0.2.19
CVE-2022-30740US	medium4.3	0.22% (13th)	—	17.0.1.69	2022-06-07	< 17.0.1.69
CVE-2021-25521US	low3.3	0.22% (12th)	—	16.0.2	2021-12-08	< 16.0.2
CVE-2024-20838US	high7.8	0.18% (8th)	—	24.0.3.2	2024-03-05	< 24.0.3.2
CVE-2024-34671US	medium5.5	0.16% (5th)	—	26.0.3.1	2024-10-08	< 26.0.3.1
CVE-2024-20869US	medium5.5	0.15% (4th)	—	25.0.0.41	2024-05-07	< 25.0.0.41
CVE-2024-20837US	medium5.3	0.15% (4th)	—	24.0.0.41	2024-03-05	< 24.0.0.41
CVE-2025-58485US	medium5.5	0.12% (2nd)	—	29.0.0.48	2025-12-02	< 29.0.0.48
CVE-2025-20995US	high7.1OT elevated	0.12% (2nd)	—	28.0.0.59	2025-06-04	< 28.0.0.59
CVE-2025-20994US	high7.1OT elevated	0.11% (2nd)	—	28.0.0.59	2025-06-04	< 28.0.0.59
CVE-2026-21036US	medium5.5OT elevated	0.09% (1st)	—	30.0.0.39	2026-06-05	< 30.0.0.39

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-703Improper Check or Handling of Exceptional Conditions5 CVEs
CWE-287Improper Authentication4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-266Incorrect Privilege Assignment3 CVEs
CWE-285Improper Authorization3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-276Incorrect Default Permissions2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan