CVE-2021-33596

Fake Apple login prompt in F-Secure SAFE browser for iOS

Low · published August 5, 2021

CVSS v3.1
3.5
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. Exploiting the vulnerability requires the user to click on a specially crafted, seemingly legitimate URL containing an embedded malicious redirect while using F-Secure Safe Browser for iOS.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00797 · 56.0th percentile
Published
2021-08-05T19:26Z
EPSS history
Timeline
  • 05 AUG 19:26Z
    Fake Apple login prompt in F-Secure SAFE browser for iOS
    cvelistv5