CVE-2026-21132
MediumCVSS 6.0Summary
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
Risk Assessment
An attacker can execute malicious script in the browser context, potentially leading to data theft or session hijacking.
Recommendation
Update Samsung Internet to version 30.0.5.24 or later. Avoid opening suspicious links.
Other vulnerabilities in Samsung Internet
See all- CVE-2026-21135Medium
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
- CVE-2026-21036Medium
An improper authorization vulnerability in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.
- CVE-2025-58485Medium
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
Original NVD description (English source)
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS