CVE-2026-21135: Medium severity Samsung Samsung Internet vulnerability
Published Oct 12, 2026
·Updated
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
Affected Software
1 affected component
Samsung Samsung Internet<30.0.5.6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Samsung Internetto a version that resolves this vulnerability.Fixed in 30.0.5.6
Event History
Oct 12, 2026
CVE Published
via MITRE·04:57 AM
Data Sourced
via MITRE·04:57 AM
DescriptionWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs local access to the affected device. The vulnerability is not described as remotely exploitable and does not require privileges or user interaction according to the supplied CVSS vector.
2
Which versions need remediation?
Samsung Internet versions before 30.0.5.6 are affected. Update to version 30.0.5.6 or later.
3
What is the impact if exploitation succeeds?
A local attacker may access sensitive information. The supplied CVSS vector indicates confidentiality impact, with no stated integrity or availability impact.