Samsung Escargot vulnerabilities

20 CVEs affecting Samsung Escargot, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-8915, published 2026-05-28.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-41268, published 2023-12-06. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: from 3.0.0 through 4.0.0.
• CVE-2024-32671, published 2024-07-29. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Heap-based Buffer Overflow vulnerability in Samsung Open Source Escargot JavaScript engine allows Overflow Buffers.This issue affects Escargot: 4.0.0.
• CVE-2026-8915, published 2026-05-28. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31.
• CVE-2026-47314, published 2026-05-19. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
• CVE-2026-47310, published 2026-05-19. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
• CVE-2026-47311, published 2026-05-19. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
• CVE-2026-25204, published 2026-04-13. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. This issue affects escarogt prior to commit hash…
• CVE-2026-40447, published 2026-04-13. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.
• CVE-2026-40446, published 2026-04-13. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue affects Escargot:…
• CVE-2026-47317, published 2026-05-19. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.

Latest

• CVE-2026-47316, published 2026-05-19. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot:…
• CVE-2026-47315, published 2026-05-19. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot:…
• CVE-2026-47313, published 2026-05-19. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
• CVE-2026-47312, published 2026-05-19. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
• CVE-2026-47309, published 2026-05-19. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.