Improper Authorization in Samsung Internet

Publication date: 2026-06-05

Last updated on: 2026-06-30

Assigner: Samsung Mobile

Description

Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-05

Last Modified

2026-06-30

Generated

2026-07-16

AI Q&A

2026-06-05

EPSS Evaluated

2026-07-14

NVD

CVE-2026-21036

EUVD

EUVD-2026-34808

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	internet	to 30.0.0.39 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper authorization issue in Samsung Internet versions prior to 30.0.0.39. It allows local attackers to access sensitive information without proper permission checks.

Impact Analysis

The impact of this vulnerability is that a local attacker could gain unauthorized access to sensitive information stored or accessible through the Samsung Internet browser, potentially leading to data exposure or privacy breaches.

Hi! I’m here to help you understand CVE-2026-21036. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70