6.0
Medium
CVE-2026-21132 Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary…
Description
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Internet 30.0 | earliest → < 30.0.5.24 | 30.0.5.24 |
Other CVEs of Samsung Internet
The 29 CVEs of Samsung Internet →
CVE-2026-21135
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive…
5.9
Medium
CVE-2026-21036
Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive…
6.3
Medium
CVE-2025-58485
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary…
5.5
Medium
CVE-2025-20995
Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior…
4.9
Medium