CVE-2021-33595: falha de baixa gravidade em F-Secure Mobile Security
F-Secure Safe browser for iOS vulnerable to Address Bar Spoofing
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.5epss 1.1%
A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address bar spoofing attack.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
F-Secure · F-Secure Mobile SecurityCVEs relacionadas — F-Secure Mobile Security
No mesmo produto, das mais perigosas para as menos.
CVE-2021-33594LOWF-Secure Safe browser for Android vulnerable to Address Bar SpoofingEPSS 1.1%CVE-2021-33596LOWFake Apple login prompt in F-Secure SAFE browser for iOSEPSS 0.8%CVE-2021-40834MEDIUMUser interface Spoofing in F-Secure SAFE browser for AndroidEPSS 0.8%CVE-2021-40835MEDIUMURL Address Bar Spoofing in F-Secure SAFE Browser for iOSEPSS 0.7%CVE-2022-28873MEDIUMMultiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidEPSS 0.6%CVE-2022-28868MEDIUMAddress Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidEPSS 0.5%