CVE-2022-22290

CVE-2022-22290 affects Samsung Internet and is described in connected sources as an Incorrect download source UI in the Downloads component prior to version 16.0.6.23, enabling domain spoofing via a crafted HTML page. The vulnerability is tied to the user download interface rather than an in-app ...

CVE-2022-27839

Technical details (affected products, versions, root cause, and remediation) are not publicly available in the provided connected documents. Please monitor for updates from official sources.

CVE-2021-25348

Samsung Internet (Android) is affected by CVE-2021-25348 due to an improper permission grant check in versions prior to 13.0.1.60, which allows access to files in internal storage without the authorized STORAGE permission. The issue stems from insufficient validation of permission grants when acc...

CVE-2022-30740

CVE-2022-30740 describes an improper auto-fill algorithm in Samsung Internet o n Android prior to version 17.0.1.69 that can allow a physical attacker to guess stored credit card numbers. The vulnerability originates from how autofill data is managed, enabling local/physical access exploitation w...

CVE-2024-20838

Samsung Internet prior to version 24.0.3.2 contains an improper validation vulnerability that could allow local attackers to execute arbitrary code. Affected: Samsung Internet on supported Samsung devices (pre-24.0.3.2). Root cause: improper validation in the browser component. Impact: local code...

CVE-2022-30738

Samsung Internet prior to 17.0.1.69 is affected by an improper check in the Loader, enabling attackers to spoof the address bar by executing script. Affected component: Samsung Internet’s Loader. Root cause: inadequate validation leading to UI spoof vulnerability. Impact: address bar spoofing, en...

CVE-2022-22284

CVE-2022-22284 describes an improper authentication vulnerability in Samsung Internet prior to version 16.0.2.19, enabling an attacker with local access to bypass the secret mode password authentication. Affected product is Samsung Internet (mobile browser); root cause is bypassing the secret mod...

CVE-2021-25354

The CVE-2021-25354 entry affects Samsung Internet (Samsung Browser). The issue is an improper input check in versions prior to 13.2.1.46, which can be exploited via a malicious deeplink to launch non-exported activities in the browser. Impact is that an attacker could trigger unintended activity ...

CVE-2024-20869

CVE-2024-20869 affects Samsung Internet prior to 25.0.0.41. The flaw is described as an improper privilege management issue that allows local attackers to bypass protection for cookies, enabling access to sensitive information. The connected sources (NVD/Red Hat PT-Security) confirm the vulnerabl...

CVE-2023-30704

CVE-2023-30704 affects Samsung Internet prior to 22.0.0.35. The vulnerability is an improper authorization flaw that allows a physical attacker to access downloaded files in Secret Mode without user authentication. The issue impacts confidentiality (high) with a physical attack vector and low exp...

CVE-2025-20995

Summary: Samsung Internet prior to 28.0.0.59 has an authorization issue in the ClientProvider component that mishandles privilege insufficiency, enabling local attackers on non-Samsung devices to read and write arbitrary files. What’s affected: Samsung Internet versions before 28.0.0.59; vulnerab...

CVE-2025-20994

CVE-2025-20994 : The issue involves Samsung Internet prior to version 28.0.0.59 on non-Samsung devices, where the SyncClientProvider mishandles permissions, allowing a local attacker to read and write arbitrary files. The vulnerability description and related sources consistently indicate impact ...

CVE-2024-20837

Samsung Internet prior to version 24.0.0.41 contains an issue in how it grants permissions for Trusted Web Activities (TWAs). The vulnerability arises from improper handling of permission grants, enabling local attackers to grant permissions to their own TWA WebApps without user interaction. Affe...

CVE-2022-39873

CVE-2022-39873 affects Samsung Internet (pre-18.0.4.14). The root cause is improper authorization, enabling a physical attacker to add bookmarks in Secret/Private mode without user authentication. The vulnerability impacts Samsung Internet on affected devices powered by versions before 18.0.4.14....

CVE-2024-20829

The CVE-2024-20829 issue affects Samsung Internet (pre-24.0.0.0) where missing proper interaction for opening deeplinks can allow a remote attacker to open an application without user interaction. Connected sources (PT-2024-18736) specify Samsung Internet versions prior to 24.0.0.0 as affected an...

CVE-2021-25445

CVE-2021-25445 affects Samsung Internet prior to version 14.2. An unprotected component allows an untrusted application to access internal Samsung Internet files, exposing partial confidentiality of data. Root cause described as an unprotected component vulnerability. Public references indicate a...

CVE-2021-25520

CVE-2021-25520 affects Samsung Internet prior to version 16.0.2. The vulnerability arises from insecure caller checks and input validation in the SearchKeyword deeplink logic, allowing untrusted applications to execute script code in the browser. The impact is cross-origin script execution with p...

CVE-2024-20828

CVE-2024-20828 concerns Samsung Internet prior to version 24.0, where improper authorization verification allows physical attackers to access files downloaded in SecretMode without authentication. Affected component: Samsung Internet; root cause: insufficient authorization checks. Impact: potenti...

CVE-2024-34671

Summary: CVE-2024-34671 affects Samsung Internet prior to 26.0.3.1. The issue is the use of implicit intents for sensitive translation-related communication, which can allow a local attacker to obtain sensitive information. User interaction is required to trigger exploitation. Affected software: ...

CVE-2021-25366

CVE-2021-25366 affects Samsung Internet prior to version 13.2.1.70 and is caused by improper access control that allows physically proximate attackers to bypass the secret mode authentication. The available documents identify the affected software/component and the underlying issue but do not pro...

CVE-2021-25418

CVE-2021-25418 affects Samsung Internet prior to version 14.0.1.62. The vulnerability is described as an improper component protection that allows untrusted applications to execute arbitrary activity under certain conditions. Affected product is Samsung Internet; root cause is improper component ...

CVE-2025-32407

CVE-2025-32407 affects Samsung Internet for Galaxy Watch, version 5.0.9 (widely deployed up to Galaxy Watch 3). The issue is improper TLS certificate validation in the browser, enabling an attacker to impersonate any visited website and potentially perform MitM attacks, with corresponding risk to...

CVE-2023-30674

Samsung Internet

CVE-2021-25419

CVE-2021-25419 affects Samsung Internet prior to version 14.0.1.62, due to non-compliance with a secure coding scheme. The vulnerability could allow an attacker to display a fake URL in the address bar via a phishing URL link, enabling limited user impact as described in the connected documents. ...

CVE-2021-25466

CVE-2021-25466 affects Samsung Internet prior to version 15.0.2.47. Description: improper scheme check enables a man‑in‑the‑middle attack and could allow obtaining a Samsung Account token. No further exploitation details, affected subcomponents, or concrete patch/mitigation steps are provided in ...

CVE-2021-25400

CVE-2021-25400 affects Samsung Internet prior to 14.0.1.20. The vulnerability is described as an intent redirection that could let an attacker execute a privileged action. Public technical details in connected sources are limited to the affected product and the version before the patch; exploitat...

CVE-2021-25521

CVE-2021-25521 affects Samsung Internet prior to version 16.0.2. The issue is an insecure check in the sharevia deeplink logic, enabling untrusted applications to obtain the user’s current tab URL in Samsung Internet. This is a local issue tied to the deeplink handling, with impact limited to con...

CVE-2026-21036

Samsung Internet before version 30.0.0.39 is affected by an improper authorization vulnerability that could allow local attackers to access sensitive information. The issue affects Samsung Internet (

CVE-2025-58485

Samsung Internet prior to 29.0.0.48 is affected by an input validation issue that allows local attackers to inject arbitrary script. The root cause is improper input validation in the browser component, enabling local exploitation without network access. Impact is confined to local attack vectors...