Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script.
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Samsung
- Product
- Galaxy / One UI / Knox / SmartThings
- Exposure class
- Mobile OS
Why it ranks 5 (Routine)
- Product class: mobile OS
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-21132 on this site · NVD · CVE.org · Vulnpedia