What’s Vulnerable › Vulnerabilities

CVE-2021-33595: F-Secure Safe browser for iOS vulnerable to Address Bar Spoofing

• Severity: low (CVSS 3.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-08-11 · updated 2026-06-17

Description

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address bar spoofing attack.

Affected products

• F-Secure SAFE Browser for Android Version 18.5: before 18.4.272901 — fixed in 18.4.272901

How to fix

Upgrade to a fixed version: F-Secure SAFE Browser for Android Version 18.5 18.4.272901. Check the vendor advisory for mitigations.

References

• https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33595
• https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33595

Get alerted when CVE-2021-33595 or the next vulnerability affects your stack