Read the docs
TI-2025-23485 Aliases CVE-2025-32407GHSA-2hgg-g6cr-365f

Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch…

Priority MEDIUM 60CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Spoofing
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-295.

Summary

Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate any and all websites visited by the user. This is a critical misconfiguration in the way the browser validates the identity of the server. It negates the use of HTTPS as a secure channel, allowing for Man-in-the-Middle attacks, stealing sensitive information or modifying incoming and outgoing traffic. NOTE: This vulnerability is in an end-of-life product that is no longer maintained by the vendor.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00298 22nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:samsung:internet:5.0.9:*:*:*:*:*:*:*5.0.9VulnerableSamsung
  • cpe:2.3:a:samsung:internet:5.0.9:*:*:*:*:*:*:* Versions 5.0.9 Vulnerable ·Samsung

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-32407
  2. 2026-10-03 Alias added: GHSA-2hgg-g6cr-365f

References

Exploit 1

  • TI-2024-13632 Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows… CVSS 3.1HIGH 7.8
  • TI-2021-07657 Improper privilege management in Samsung Internet CVSS 3.1HIGH 7.8
  • TI-2021-07639 Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows… CVSS 3.1HIGH 7.8
  • TI-2025-14991 Improper handling of insufficient permission in ClientProvider in Samsung Internet… CVSS 3.1HIGH 7.1
  • TI-2025-14990 Improper handling of insufficient permission in SyncClientProvider in Samsung Internet… CVSS 3.1HIGH 7.1
  • TI-2023-14488 Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie. CVSS 3.1MEDIUM 6.5
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences