Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-40834 EUVD-2021-27991GHSA-39jf-9gqp-rjmj

User interface Spoofing in F-Secure SAFE browser for Android

Published Dec 10, 2021 · Updated Aug 4, 2024 · Assigned by F-SecureUS

Description

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack.

Affected products

VendorProductAffectedFixed
F-Secure F-Secure Mobile Security 18.5x – < 17.9* 17.9*

References