Samsung Internet vulnerabilities
29 vulnerabilities
Known vulnerabilities in Samsung Internet, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-25466samsung mobilesamsung internet+1
EPSS score0.77%
Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.CVE-2021-25521samsung mobilesamsung internet+1EPSS score0.22%
Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet.CVE-2021-25354samsung mobilesamsung internet+1EPSS score0.47%
Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink.CVE-2021-25400samsung mobilesamsug internet+1EPSS score0.23%
Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action.CVE-2021-25366samsung mobilesamsung internet+1EPSS score0.27%
Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication.CVE-2021-25445samsung mobilesamsung internet+1EPSS score0.75%
Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access internal files in Samsung Internet.CVE-2021-25520samsung mobilesamsung internet+1EPSS score0.43%
Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet.CVE-2021-25419samsung mobilesamsung internet+1EPSS score0.76%
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link.CVE-2021-25348samsung mobilesamsung internet+1EPSS score0.27%
Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission.CVE-2021-25418samsung mobilesamsung internet+1EPSS score0.23%
Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition.CVE-2025-20994samsunginternetEPSS score0.11%
Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitrary files.CVE-2025-20995samsunginternetEPSS score0.12%
Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files.CVE-2025-58485samsunginternetEPSS score0.12%
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.CVE-2025-32407samsunginternetEPSS score0.30%
Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate any and all websites visited by the user. This is a critical misconfiguration in the way the browser validates the identity of the server. It negates the use of HTTPS as a secure channel, allowing for Man-in-the-Middle attacks, stealing sensitive information or modifying incoming and outgoing traffic. NOTE: This vulnerability is in an end-of-life product that is no longer maintained by the vendor.CVE-2022-39873samsung mobilesamsung internet+1EPSS score0.26%
Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication.CVE-2022-27839samsung mobilesamsung internet+1EPSS score0.57%
Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials.CVE-2022-22284samsung mobilesamsung internet+1EPSS score0.22%
Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authenticationCVE-2022-22290samsung mobilesamsung internet+1EPSS score0.79%
Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page.CVE-2022-30738samsung mobilesamsung internet+1EPSS score0.55%
Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script.CVE-2022-30740samsung mobilesamsung internet+1EPSS score0.22%
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers.