CVE-2022-38163

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-451

Affected software

No affected versions have been published.

Timeline

Published
Nov 7, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-381646.5A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted website could make a phishing attaCVE-2022-381659.8Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbitCVE-2022-381667.5In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dll unpacker handler cCVE-2022-381676.1The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS.CVE-2022-381689.1Broken Access Control in User Authentication in Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.0.4 allows remote unauthenticated attackCVE-2022-38176.5A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionalityCVE-2022-381704.7In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag whiCVE-2022-381717.8Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). ProcessinCVE-2022-381726.1ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboarCVE-2022-381767.8An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as part of the installer package for the ClientCVE-2022-381777.5By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is posCVE-2022-381787.5By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is pos
CVE-2022-38163: Low severity, CVSS 3.5 | Vulnix