Security Resilience

CVE-2024-20837

Samsung Internet ≤ 24.0.0.41

Published
05 March 2024
Modified
17 June 2026
Patch / advisory
View advisory
CVSS Score v3.1 5.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0015 4th percentile
Risk Priority 39 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2024-20837 is a medium-severity an unspecified weakness vulnerability in Samsung Internet. Its CVSS base score is 5.3 (Medium).

Operationally, ranked at the 4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user interaction.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2024-20828Same product: Samsung Internet
CVE-2023-30704Same product: Samsung Internet
CVE-2024-34671Same product: Samsung Internet
CVE-2025-32407Same product: Samsung Internet
CVE-2025-20995Same product: Samsung Internet
CVE-2024-20829Same product: Samsung Internet
CVE-2025-20994Same product: Samsung Internet
CVE-2024-20838Same product: Samsung Internet
CVE-2024-20869Same product: Samsung Internet
CVE-2025-58485Same product: Samsung Internet

Affected Assets

samsung
internet
≤ 24.0.0.41

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References