CVE-2021-40834: F-Secure Safe

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack.

Affected products

• F-Secure Safe: up to and including 17.9

Published 2021-12-10. Last modified 2026-06-17.