Improper check in Loader in Samsung Internet before 17.0.1.69 allows malicious users to spoof address bar via executing script.
samsung internet