CVE-2026-21036

Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information

Medium · published June 5, 2026

CVSS v4.0
6.3
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H
EPSS
0.00094 · 0.6th percentile
Published
2026-06-05T10:15Z
EPSS history
Timeline
  • 05 JUN 10:15Z
    Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information
    cvelistv5