cve.bz

CVE-2024-20837

5.3 mediumEPSS 0.1%

Medium (5.3) in samsung internet. EPSS 0.1% chance of exploitation in the next 30 days.

Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user interaction.

Severity

CVSS 3.1

5.3 medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS
0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-11-01)
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON