CVE-2017-17692

CVE-2017-17692 affects Samsung Internet Browser 5.4.02.3. A vulnerability allows remote attackers to bypass the Same Origin Policy by serving crafted JavaScript that redirects to a child tab and rewrites the innerHTML, enabling information disclosure. Public materials in connected docs describe p...

CVE-2017-17859

CVE-2017-17859 affects Samsung Internet Browser 6.2.01.12. The issue is a Same Origin Policy bypass that enables UXSS to leak sensitive information via an IFRAME inside XSLT data in an MHTML file. The root cause, as described in the placed description, is that JavaScript in one part of the MHTML ...