Samsung Internet vulnerabilities, page 2
29 vulnerabilities
Known vulnerabilities in Samsung Internet, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-20838samsunginternet
EPSS score0.18%
Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitrary code.CVE-2024-20829samsunginternetEPSS score0.35%
Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers to open an application without proper interaction.CVE-2024-20837samsunginternetEPSS score0.15%
Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user interaction.CVE-2024-20869samsunginternetEPSS score0.15%
Improper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows local attackers to bypass protection for cookies.CVE-2024-20828samsunginternetEPSS score0.24%
Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication.CVE-2024-34671samsunginternetEPSS score0.16%
Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability.CVE-2026-21036samsunginternetEPSS score0.09%
Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.CVE-2023-30704samsunginternetEPSS score0.23%
Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication.CVE-2023-30674samsunginternetEPSS score0.58%
Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.