Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-20837

Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebAp

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SamsungMobile

Description

Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user interaction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Samsung Mobile Samsung Internet

Default version status: affected

  • 24.0.0.41unaffected

References