CVE-2021-33594: F-Secure Safe

Low severity, CVSS 3.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted a malicious URL, it appears like a legitimate one on the address bar, while the content comes from other domain and presented in a window, covering the original content. A remote attacker can leverage this to perform address bar spoofing attack.

Affected products

• F-Secure Safe: before 18.4.0 (fixed in 18.4.0)

Published 2021-08-11. Last modified 2026-06-17.