CVE-2022-28868: falha de média gravidade em F-Secure Mobile Security
Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.5%
An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted malicious webpage/URL, user may be tricked for a short period of time (until the page loads) to think content may be coming from a valid domain, while the content comes from the attacker controlled site.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
F-Secure · F-Secure Mobile SecurityCVEs relacionadas — F-Secure Mobile Security
No mesmo produto, das mais perigosas para as menos.
CVE-2021-33594LOWF-Secure Safe browser for Android vulnerable to Address Bar SpoofingEPSS 1.1%CVE-2021-33595LOWF-Secure Safe browser for iOS vulnerable to Address Bar SpoofingEPSS 1.1%CVE-2021-33596LOWFake Apple login prompt in F-Secure SAFE browser for iOSEPSS 0.8%CVE-2021-40834MEDIUMUser interface Spoofing in F-Secure SAFE browser for AndroidEPSS 0.8%CVE-2021-40835MEDIUMURL Address Bar Spoofing in F-Secure SAFE Browser for iOSEPSS 0.7%CVE-2022-28873MEDIUMMultiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidEPSS 0.6%