Samsung Mobile Samsung Flow vulnerabilities

3 CVEs affecting Samsung Mobile Samsung Flow, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21134, published 2026-10-12.

More from Samsung Mobile.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-21134, published 2026-10-12. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
• CVE-2026-21133, published 2026-10-12. Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days. Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
• CVE-2026-21131, published 2026-10-12. Low severity, CVSS 2.1. EPSS: 0.1% chance of exploitation in the next 30 days. Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.