CVE-2023-30704: Samsung Internet

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication.

Affected products

• Samsung Internet: before 22.0.0.35 (fixed in 22.0.0.35)

Published 2023-08-10. Last modified 2026-06-17.