CVE-2021-25509: Samsung Flow

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite abtraty file in the Windows known folders.

Affected products

• Samsung Samsung Flow: before 4.8.5.0 (fixed in 4.8.5.0)

Published 2021-11-05. Last modified 2026-06-17.