Samsung Mobile Samsung Internet

• CVE-2026-21135 Medium 5.9 Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information. 0.1%
• CVE-2026-21132 Medium 6.0 Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability. 0.3%
• CVE-2026-21036 Medium 6.3 Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information. <0.1%
• CVE-2025-58485 Medium 5.5 Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script. 0.1%
• CVE-2025-20995 Medium 4.9 Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files. 0.1%
• CVE-2025-20994 Medium 4.5 Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitr 0.1%
• CVE-2024-34671 Low 3.3 Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for tr 0.2%
• CVE-2024-20869 Medium 5.5 Improper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows local attackers to bypass protection for cookies. 0.1%
• CVE-2024-20838 Medium 6.8 Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitrary code. 0.2%
• CVE-2024-20837 Medium 5.3 Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user inte 0.1%
• CVE-2024-20829 Medium 5.4 Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers to open an application without proper interaction. 0.3%
• CVE-2024-20828 Low 2.4 Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication. 0.2%
• CVE-2023-30704 Low 3.8 Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication. 0.2%
• CVE-2023-30674 Medium 6.5 Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie. 0.6%
• CVE-2022-39873 Medium 4.3 Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication. 0.3%
• CVE-2022-30740 Medium 4.1 Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers. 0.2%
• CVE-2022-30738 Medium 4.3 Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script. 0.6%
• CVE-2022-27839 Low 3.3 Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials. 0.6%
• CVE-2022-22290 Medium 6.5 Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page. 0.8%
• CVE-2022-22284 Medium 5.7 Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication 0.2%
• CVE-2021-25521 Medium 4.0 Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet. 0.2%
• CVE-2021-25520 Medium 5.9 Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet. 0.4%
• CVE-2021-25466 Medium 6.5 Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token. 0.8%
• CVE-2021-25445 Unrated Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access internal files in Samsung Internet. 0.8%
• CVE-2021-25419 Unrated Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link. 0.8%
• CVE-2021-25418 Unrated Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition. 0.2%
• CVE-2021-25366 Low 3.2 Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication. 0.3%
• CVE-2021-25354 Low 3.3 Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink. 0.5%
• CVE-2021-25348 Low 2.1 Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission. 0.3%