CVE-2021-25466: Samsung Internet

Medium severity, CVSS 5.9. EPSS: 0.8% chance of exploitation in the next 30 days.

Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.

Affected products

• Samsung Internet: before 15.0.2.47 (fixed in 15.0.2.47)

Published 2021-09-09. Last modified 2026-06-17.