Samsung Bixby vulnerabilities

4 CVEs affecting Samsung Bixby, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21108, published 2026-09-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-25380, published 2021-04-09. High severity, CVSS 7.3. EPSS: 0.6% chance of exploitation in the next 30 days. Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions registered by the user.
CVE-2022-23434, published 2022-02-11. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and…
CVE-2025-20965, published 2025-05-07. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper handling of insufficient permission in Bixby wakeup prior to version 2.3.74.8 allows local attackers to access sensitive data.
CVE-2026-21108, published 2026-09-09. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information.