CVE-2021-25520: Samsung Internet

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet.

Affected products

• Samsung Internet: before 16.0.2 (fixed in 16.0.2)

Published 2021-12-08. Last modified 2026-06-17.