Vulnerabilities > CVE-2021-40834 - Improper Restriction of Rendered UI Layers or Frames vulnerability in F-Secure Safe 17.9

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
f-secure
CWE-1021
NVD
Published: 2021-12-10
Updated: 2024-11-21

Summary

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack.

Vulnerable Configurations

Part Description Count
Application
F-Secure
2

Common Weakness Enumeration (CWE)

References