CVE-2025-58485
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
Risk Assessment
A local attacker could inject malicious script, potentially leading to unauthorized actions within the user's browser context.
Recommendation
Update Samsung Internet to version 29.0.0.48 or later.
Other vulnerabilities in Samsung Internet
See all- CVE-2026-21135Medium
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
- CVE-2026-21132Medium
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
- CVE-2026-21036Medium
An improper authorization vulnerability in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.
Original NVD description (English source)
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS