CVE-2021-25354

Medium

5.3/10

Summary

Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink.

Attack Complexity: LOW
Attack Vector: LOCAL
Integrity Impact: LOW
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: LOW
Availability Impact: LOW

References

Advisory Timeline

Published Mar 25, 2021

CVE-2021-25354

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS