CVE-2021-25366: Samsung Internet

Low severity, CVSS 2.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication.

Affected products

• Samsung Internet: before 13.2.1.70 (fixed in 13.2.1.70)

Published 2021-03-25. Last modified 2026-06-17.