Vulnerability Details CVE-2021-25520
Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 62.6%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
Products affected by CVE-2021-25520
-
cpe:2.3:a:samsung:internet:-
-
cpe:2.3:a:samsung:internet:13.2.1.46
-
cpe:2.3:a:samsung:internet:13.2.1.70
-
cpe:2.3:a:samsung:internet:14.0.1.20
-
cpe:2.3:a:samsung:internet:14.0.1.62