Samsung Mobile Samsung Internet vulnerabilities

2 CVEs affecting Samsung Mobile Samsung Internet, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21135, published 2026-10-12.

More from Samsung Mobile.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-21132, published 2026-10-12. Medium severity, CVSS 6.0. EPSS: 0.5% chance of exploitation in the next 30 days. Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
• CVE-2026-21135, published 2026-10-12. Medium severity, CVSS 5.9. EPSS: 0.1% chance of exploitation in the next 30 days. Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.