Samsung Internet <30.0.5.24: Improper Input Validation Allows Script Injection
CVE-2026-21132 Published on October 12, 2026
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
Vulnerability Analysis
CVE-2026-21132 is exploitable with network access. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
PASSIVE
Products Associated with CVE-2026-21132
Want to know whenever a new CVE is published for Samsung Internet? stack.watch will email you.
Affected Versions
Samsung Mobile Samsung Internet:- Version 30.0.5.24 and below * is unaffected.