CVE-2026-21135
MediumCVSS 5.9Summary
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
Risk Assessment
A local attacker can access sensitive data stored or processed by the browser, potentially leading to privacy breaches. The risk applies to devices with the vulnerable version installed.
Recommendation
Update Samsung Internet to version 30.0.5.6 or later. Avoid installing untrusted applications that could exploit this flaw.
Other vulnerabilities in Samsung Internet
See all- CVE-2026-21132Medium
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
- CVE-2026-21036Medium
An improper authorization vulnerability in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.
- CVE-2025-58485Medium
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
Original NVD description (English source)
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS