U.S. CISA adds Samsung mobile devices flaw to its Known Exploited Vulnerabilities catalog

Securityaffairs.Co •Pierluigi Paganini • November 11, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Samsung mobile devices flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Samsung mobile devices flaw, tracked as CVE-2025-21042 (CVSS score of 8.8), to its Known Exploited Vulnerabilities (KEV) catalog. The now-patched Samsung Galaxy flaw CVE-2025-21042 was exploited as a zero-day […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds Samsung Mobile Vulnerability CVE-2025-21042 to Exploited Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Samsung mobile devices vulnerability, tracked as CVE-2025-21042, to its Known Exploited Vulnerabilities catalog. This flaw, which has a CVSS score of 8.8, was exploited as a zero-day and affects Samsung Galaxy devices. The addition to the catalog follows recent research detailing the LANDFALL exploit. 2 sources 35

Extracted Entities

U.S. CISA adds Samsung mobile devices flaw to its Known Exploited Vulnerabilities catalog

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)