CVE-2026-21132

Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.

Score

CVSS 4.0 6.0 Medium

Status

Awaiting Analysis - mobile.security@samsung.com

Published

2026-10-12

Last modified

2026-10-15

Affected products

• Samsung Internet (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=10