CVE-2026-21036
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An improper authorization vulnerability in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.
Risk Assessment
A local attacker could access sensitive data stored by the browser, such as passwords or browsing history, posing a risk to user privacy.
Recommendation
It is recommended to immediately update Samsung Internet to version 30.0.0.39 or later to remediate the vulnerability.
Other vulnerabilities in Samsung Internet
See all- CVE-2026-21135Medium
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
- CVE-2026-21132Medium
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
- CVE-2025-58485Medium
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
Original NVD description (English source)
Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS