Improper Authorization Flaw in Samsung Internet Browser
CVE-2026-21036

6.3MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Internet
Vendor
CVE Published:
5 June 2026

What is CVE-2026-21036?

An improper authorization vulnerability in Samsung Internet prior to version 30.0.0.39 enables local attackers to exploit this flaw and gain unauthorized access to sensitive information. This issue poses significant risks to user data security and privacy. Users are strongly advised to upgrade to the latest version to mitigate the risk of exploitation.

Affected Version(s)

Samsung Internet 30.0.0.39

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.