CVE-2021-33595: fallo de gravedad baja en F-Secure Mobile Security
F-Secure Safe browser for iOS vulnerable to Address Bar Spoofing
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 3.5epss 1.1%
A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address bar spoofing attack.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Productos afectados
F-Secure · F-Secure Mobile SecurityCVEs relacionadas — F-Secure Mobile Security
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-33594LOWF-Secure Safe browser for Android vulnerable to Address Bar SpoofingEPSS 1.1%CVE-2021-33596LOWFake Apple login prompt in F-Secure SAFE browser for iOSEPSS 0.8%CVE-2021-40834MEDIUMUser interface Spoofing in F-Secure SAFE browser for AndroidEPSS 0.8%CVE-2021-40835MEDIUMURL Address Bar Spoofing in F-Secure SAFE Browser for iOSEPSS 0.7%CVE-2022-28873MEDIUMMultiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidEPSS 0.6%CVE-2022-28868MEDIUMAddress Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidEPSS 0.5%