CVE-2022-27839 Auth bypass in Samsung Internet

What is CVE-2022-27839?

CVE-2022-27839 is a low-severity authentication bypass vulnerability in Samsung Internet, published on 11 Apr 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials.

Weakness: CWE-287

Which versions are affected by CVE-2022-27839?

It affects 1 product.

Products include Samsung Internet.

How do I fix CVE-2022-27839?

No fix has been published for CVE-2022-27839 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2022-27839 being exploited?

There is no known exploitation of CVE-2022-27839 in the wild and no public exploit code.

Other vulnerabilities in Samsung Internet

• CVE-2021-25400 Other in Samsug Internet High 7.8
• CVE-2021-25418 Missing authorization in Samsung Internet High 7.8
• CVE-2024-20838 Code injection in Samsung Internet Medium 6.8
• CVE-2023-30674 Security feature bypass in Samsung Internet Medium 6.5
• CVE-2022-22290 Other in Samsung Internet Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wfvq-g4v2-j6q7.