IN
Product
Internet
29
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 21Low 3
Watch
Add Internet to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-30674 | 6.5 | Jul 6 | Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie Affected: before 21.0.0.41 |
| CVE-2022-22290 | 6.5 | Jan 14 | Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page Affected: before 16.0.6.23 |
| CVE-2021-25419 | 6.5 | Jun 11 | Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link Affected: before 14.0.1.62 |
| CVE-2021-25520 | 6.1 | Dec 8 | Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes… Affected: before 16.0.2 |
| CVE-2025-32407 | 5.9 | May 16 | Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate… Affected: 5.0.9 |
| CVE-2021-25466 | 5.9 | Sep 9 | Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token Affected: before 15.0.2.47 |
| CVE-2026-21036 | 5.5 | Jun 5 | Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information Affected: before 30.0.0.39 |
| CVE-2025-58485 | 5.5 | Dec 2 | Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script Affected: before 29.0.0.48 |
| CVE-2024-34671 | 5.5 | Oct 8 | Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information Affected: before 26.0.3.1 |
| CVE-2024-20869 | 5.5 | May 7 | Improper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows local attackers to bypass protection for cookies Affected: before 25.0.0.41 |
| CVE-2022-22284 | 5.5 | Jan 10 | Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication Affected: before 16.0.2.19 |
| CVE-2024-20837 | 5.3 | Mar 5 | Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA… Affected: before 24.0.0.41 |
| CVE-2024-20829 | 5.3 | Mar 5 | Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers to open an application without proper interaction Affected: 24.0 |
| CVE-2021-25445 | 5.3 | Aug 5 | Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access internal files in Samsung Internet Affected: before 14.2 |
| CVE-2021-25354 | 5.3 | Mar 25 | Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink Affected: before 13.2.1.46 |
| CVE-2024-20828 | 4.6 | Feb 6 | Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper… Affected: before 24.0 |
| CVE-2023-30704 | 4.6 | Aug 10 | Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication Affected: before 22.0.0.35 |
| CVE-2022-39873 | 4.6 | Oct 7 | Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication Affected: before 18.0.4.14 |
| CVE-2022-30740 | 4.3 | Jun 7 | Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers Affected: before 17.0.1.69 |
| CVE-2022-30738 | 4.3 | Jun 7 | Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script Affected: before 17.0.1.69 |
| CVE-2022-27839 | 4.0 | Apr 11 | Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials Affected: before 16.2.1 |
Showing 21