Samsung Internet (Samsung Mobile) - vulnerabilities (CVEs)

29 CVEs, 2 in the last 30 days, 2 known versions, newest CVE from 2026-10-12. Vendor: Samsung Mobile.

CVEs of Samsung Internet

CVE-2026-21135 - CVSS 5.9 (medium), 2026-10-12: Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
CVE-2026-21132 - CVSS 6 (medium), 2026-10-12: Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for…
CVE-2026-21036 - CVSS 6.3 (medium), 2026-06-05: Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.
CVE-2025-58485 - CVSS 5.5 (medium), 2025-12-02: Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
CVE-2025-20995 - CVSS 7.1 (high), 2025-06-04: Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local…
CVE-2025-20994 - CVSS 7.1 (high), 2025-06-04: Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local…
CVE-2024-34671 - CVSS 5.5 (medium), 2024-10-08: Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive…
CVE-2024-20869 - CVSS 5.5 (medium), 2024-05-07: Improper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows local attackers to bypass protection for cookies.
CVE-2024-20837 - CVSS 5.3 (medium), 2024-03-05: Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission…
CVE-2024-20838 - CVSS 7.8 (high), 2024-03-05: Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitrary code.
CVE-2024-20829 - CVSS 5.4 (medium), 2024-03-05: Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers to open an application without proper…
CVE-2024-20828 - CVSS 4.6 (medium), 2024-02-06: Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode…
CVE-2023-30704 - CVSS 4.6 (medium), 2023-08-10: Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without…
CVE-2023-30674 - CVSS 6.5 (medium), 2023-07-06: Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.
CVE-2022-39873 - CVSS 4.6 (medium), 2022-10-07: Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user…
CVE-2022-30740 - CVSS 4.3 (medium), 2022-06-07: Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers.
CVE-2022-30738 - CVSS 4.3 (medium), 2022-06-07: Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script.
CVE-2022-27839 - CVSS 4 (medium), 2022-04-11: Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper…
CVE-2022-22290 - CVSS 6.5 (medium), 2022-01-14: Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page.
CVE-2022-22284 - CVSS 5.7 (medium), 2022-01-10: Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication
CVE-2021-25521 - CVSS 4 (medium), 2021-12-08: Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet.
CVE-2021-25520 - CVSS 6.1 (medium), 2021-12-08: Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to…
CVE-2021-25466 - CVSS 6.5 (medium), 2021-09-09: Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung…
CVE-2021-25445 - CVSS 5.3 (medium), 2021-08-05: Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access internal files in Samsung Internet.
CVE-2021-25418 - CVSS 7.8 (high), 2021-06-11: Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in…
CVE-2021-25419 - CVSS 6.5 (medium), 2021-06-11: Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via…
CVE-2021-25366 - CVSS 3.2 (low), 2021-03-25: Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication.
CVE-2021-25354 - CVSS 5.3 (medium), 2021-03-25: Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink.
CVE-2021-25348 - CVSS 2.4 (low), 2021-03-04: Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission.