CVE-2021-25418

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-254196.5Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in adCVE-2021-254205.5Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak WCVE-2021-254215.5Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak CVE-2021-254225.5Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak WCVE-2021-254235.5Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak CVE-2021-254248.8Improper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021 Release allows bluetooth attacker to take ovCVE-2021-254255.3Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component.CVE-2021-254267.5Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 allows untrusted applicCVE-2021-254276.5SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device informationCVE-2021-254287.8Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous leCVE-2021-254294.3Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to accessCVE-2021-254304.3Improper access control vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the B