CVE-2022-22290: Samsung Internet

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page.

Affected products

• Samsung Internet: before 16.0.6.23 (fixed in 16.0.6.23)

Published 2022-01-14. Last modified 2026-06-17.