CVE-2021-33595

BASSO 3.5CVE-2021-33595 · Published 11/08/2021 · updated 17/06/2026

In breve

CVE-2021-33595 è una vulnerabilità BASSO (CVSS 3.5) che riguarda safe (f-secure).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 65.0% delle vulnerabilità.
Correzione: aggiornare a 18.4.272901 o successiva.

Package	Affected versions	Patched versions
safe f-secure	`< 18.4.272901`	`18.4.272901`

Description

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address bar spoofing attack.

References

f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame · Vendor Advisory
f-secure.com/en/business/support-and-downloads/security-advisories · Vendor Advisory
f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33595 · Vendor Advisory

Altre vulnerabilità di safe

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safe

f-secure

< 18.4.272901

18.4.272901

Description

Altre vulnerabilità di safe

Vedi tutto →