Samsung Mobile Samsung Internet vulnerabilities
15 vulnerabilities
Known vulnerabilities in Samsung Mobile Samsung Internet, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-25466samsung mobilesamsung internet+1
EPSS score0.77%
Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.CVE-2021-25521samsung mobilesamsung internet+1EPSS score0.22%
Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet.CVE-2021-25354samsung mobilesamsung internet+1EPSS score0.47%
Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink.CVE-2021-25366samsung mobilesamsung internet+1EPSS score0.27%
Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication.CVE-2021-25445samsung mobilesamsung internet+1EPSS score0.75%
Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access internal files in Samsung Internet.CVE-2021-25520samsung mobilesamsung internet+1EPSS score0.43%
Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet.CVE-2021-25419samsung mobilesamsung internet+1EPSS score0.76%
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link.CVE-2021-25348samsung mobilesamsung internet+1EPSS score0.27%
Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission.CVE-2021-25418samsung mobilesamsung internet+1EPSS score0.23%
Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition.CVE-2022-39873samsung mobilesamsung internet+1EPSS score0.26%
Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication.CVE-2022-27839samsung mobilesamsung internet+1EPSS score0.57%
Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials.CVE-2022-22284samsung mobilesamsung internet+1EPSS score0.22%
Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authenticationCVE-2022-22290samsung mobilesamsung internet+1EPSS score0.79%
Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page.CVE-2022-30738samsung mobilesamsung internet+1EPSS score0.55%
Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script.CVE-2022-30740samsung mobilesamsung internet+1EPSS score0.22%
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers.