CVE-2026-21132: Input Validation
Published Oct 12, 2026
·Updated
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
Affected Software
1 affected component
Samsung Samsung Internet<30.0.5.24
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Samsung Internetto a version that resolves this vulnerability.Fixed in 30.0.5.24
Event History
Oct 12, 2026
CVE Published
via MITRE·04:57 AM
Data Sourced
via MITRE·04:57 AM
DescriptionWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverity
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
An attacker must remotely deliver input that triggers arbitrary script injection, and the user must interact with it for exploitation to occur.
2
Which Samsung Internet versions need to be remediated?
Samsung Internet versions prior to 30.0.5.24 are affected. Update to version 30.0.5.24 or later.