Vulnerabilities > CVE-2021-33596 - Improper Restriction of Rendered UI Layers or Frames vulnerability in F-Secure Safe

047910
CVSS 4.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
f-secure
CWE-1021

Summary

Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. Exploiting the vulnerability requires the user to click on a specially crafted, seemingly legitimate URL containing an embedded malicious redirect while using F-Secure Safe Browser for iOS.