CVE-2025-58485
BaseFortify
Publication date: 2025-12-02
Last updated on: 2025-12-03
Assigner: Samsung Mobile
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | internet | to 29.0.0.48 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper input validation issue in Samsung Internet versions prior to 29.0.0.48. It allows local attackers to inject arbitrary scripts, which means an attacker with local access can execute malicious code within the browser environment.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing a local attacker to inject and execute arbitrary scripts in your browser, potentially leading to unauthorized actions or data exposure within the browser context. However, it does not affect confidentiality or availability, only integrity is impacted.