CVE-2021-33595

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address bar spoofing attack.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Affected software

Vendor	Product	Versions
F-Secure	F-Secure Mobile Security	>= 18.4x, < 18.3x*

References

https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fameVendor Advisory
https://www.f-secure.com/en/business/support-and-downloads/security-advisoriesVendor Advisory
https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33595Vendor Advisory
https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fameVendor Advisory
https://www.f-secure.com/en/business/support-and-downloads/security-advisoriesVendor Advisory
https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33595Vendor Advisory

Timeline

Published: Aug 11, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-335964.1Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is s CVE-2021-335975.5A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can CVE-2021-335986.5A Denial-of-Service (DoS) vulnerability was discovered in all versions of F-Secure Atlant whereby the SAVAPI component used in certain F-Sec CVE-2021-335995.5A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service (infinite CVE-2021-336007.5A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs b CVE-2021-336018.8A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through CVE-2021-336025.3A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive (LZW decompression meth CVE-2021-336036.5A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure produ CVE-2021-336042.5URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 CVE-2021-336054.3Improper check in CheckboxGroup in com.vaadin:vaadin-checkbox-flow versions 1.2.0 prior to 2.0.0 (Vaadin 12.0.0 prior to 14.0.0), 2.0.0 prio CVE-2021-336094.3Missing check in DataCommunicator class in com.vaadin:vaadin-server versions 8.0.0 through 8.14.0 (Vaadin 8.0.0 through 8.14.0) allows authe CVE-2021-336116.1Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 th