Samsung Internet vulnerabilities

29 CVEs affecting Samsung Internet, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21036, published 2026-06-05.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-22290, published 2022-01-14. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page.
• CVE-2021-25466, published 2021-09-09. Medium severity, CVSS 5.9. EPSS: 0.8% chance of exploitation in the next 30 days. Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.
• CVE-2021-25419, published 2021-06-11. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link.
• CVE-2021-25445, published 2021-08-05. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access internal files in Samsung Internet.
• CVE-2023-30674, published 2023-07-06. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.
• CVE-2022-27839, published 2022-04-11. Medium severity, CVSS 4.0. EPSS: 0.6% chance of exploitation in the next 30 days. Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials.
• CVE-2022-30738, published 2022-06-07. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script.
• CVE-2021-25354, published 2021-03-25. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink.
• CVE-2021-25520, published 2021-12-08. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet.
• CVE-2024-20829, published 2024-03-05. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Missing proper interaction for opening deeplink in Samsung Internet prior to version v24.0.0.0 allows remote attackers to open an application without proper interaction.

Latest

• CVE-2026-21036, published 2026-06-05. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.
• CVE-2025-58485, published 2025-12-02. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
• CVE-2025-20995, published 2025-06-04. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files.
• CVE-2025-20994, published 2025-06-04. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write…
• CVE-2025-32407, published 2025-05-16. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate any and all websites…
• CVE-2024-34671, published 2024-10-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for…
• CVE-2024-20869, published 2024-05-07. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows local attackers to bypass protection for cookies.
• CVE-2024-20838, published 2024-03-05. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitrary code.
• CVE-2024-20837, published 2024-03-05. Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days. Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user…