Filtered by vendor Samsung Subscriptions
Filtered by product Internet Subscriptions
Total 19 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-20828 1 Samsung 1 Internet 2024-11-21 2.4 Low
Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication.
CVE-2023-30704 1 Samsung 1 Internet 2024-11-21 3.8 Low
Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication.
CVE-2023-30674 1 Samsung 1 Internet 2024-11-21 6.5 Medium
Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.
CVE-2022-39873 1 Samsung 1 Internet 2024-11-21 4.3 Medium
Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication.
CVE-2022-30740 1 Samsung 1 Internet 2024-11-21 4.1 Medium
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers.
CVE-2022-30738 1 Samsung 1 Internet 2024-11-21 4.3 Medium
Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script.
CVE-2022-27839 1 Samsung 1 Internet 2024-11-21 3.3 Low
Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials.
CVE-2022-22290 1 Samsung 1 Internet 2024-11-21 6.5 Medium
Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page.
CVE-2022-22284 1 Samsung 1 Internet 2024-11-21 5.7 Medium
Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication
CVE-2021-25521 1 Samsung 1 Internet 2024-11-21 4 Medium
Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet.
CVE-2021-25520 1 Samsung 1 Internet 2024-11-21 5.9 Medium
Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet.
CVE-2021-25466 1 Samsung 1 Internet 2024-11-21 6.5 Medium
Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.
CVE-2021-25445 1 Samsung 1 Internet 2024-11-21 5.3 Medium
Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access internal files in Samsung Internet.
CVE-2021-25419 1 Samsung 1 Internet 2024-11-21 6.5 Medium
Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link.
CVE-2021-25418 1 Samsung 1 Internet 2024-11-21 7.8 High
Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition.
CVE-2021-25400 1 Samsung 1 Internet 2024-11-21 7.8 High
Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action.
CVE-2021-25366 1 Samsung 1 Internet 2024-11-21 3.2 Low
Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication.
CVE-2021-25354 1 Samsung 1 Internet 2024-11-21 3.3 Low
Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink.
CVE-2021-25348 1 Samsung 1 Internet 2024-11-21 2.1 Low
Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission.