CVE-2017-17692

PoC ×4—

CVSS 3.0

7.5 high

EPSS

79%p100

Published

Dec 21, 2017 (Dec 21, 2017)

Modified

Jun 17, 2026

Description

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property.

Vendors: samsung
Products: internet browser
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (78.8%)

In the news2 stories

Samsung Android Browser is affected by a critical SOP bypass issue, a Metasploit exploit code is available

Security AffairsDec 29, 16:14 UTC · Dec 29, 2017Exploit / PoC CVE-2017-17692

Critical "Same Origin Policy" Bypass Flaw Found in Samsung Android Browser

The Hacker NewsDec 29, 12:26 UTC · Dec 29, 2017Exploit / PoC CVE-2017-17692