Skip to content
OpenAdvisories
Low · 3.5 CVE-2021-33596 EUVD-2021-20280GHSA-p3hp-p5r4-h3gq

Fake Apple login prompt in F-Secure SAFE browser for iOS

Published Aug 5, 2021 · Updated Aug 3, 2024 · Assigned by F-SecureUS

Description

Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. Exploiting the vulnerability requires the user to click on a specially crafted, seemingly legitimate URL containing an embedded malicious redirect while using F-Secure Safe Browser for iOS.

Affected products

VendorProductAffectedFixed
F-Secure F-Secure Mobile Security 18.3x – < 18.4x 18.4x

References