VULNERABILITY INTELLIGENCE
CVE-2021-33595
CVSS score3.5 LOW
EPSS probability1.07%
CISA KEVNot currently listed
Published2021-08-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Description
A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address bar spoofing attack.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
Primary references
- cve-notifications-us@f-secure.com — Vendor Advisory
- cve-notifications-us@f-secure.com — Vendor Advisory
- cve-notifications-us@f-secure.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory