5.3
Medium
CVE-2024-20837 Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41…
Description
Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user interaction.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Internet 24.0 | earliest → < 24.0.0.41 | 24.0.0.41 |
Other CVEs of Samsung Internet
The 29 CVEs of Samsung Internet →
CVE-2026-21135
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive…
5.9
Medium
CVE-2026-21132
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary…
6.0
Medium
CVE-2026-21036
Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive…
6.3
Medium
CVE-2025-58485
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary…
5.5
Medium