CVE-2021-33595

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address bar spoofing attack.

• https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fameVendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisoriesVendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33595Vendor Advisory
• https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fameVendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisoriesVendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33595Vendor Advisory

Published

Aug 11, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33589Ribose RNP before 0.15.1 does not implement a required step …7.5
• CVE-2021-33590GattLib 0.3-rc1 has a stack-based buffer over-read in get_de…9.8
• CVE-2021-33591An exposed remote debugging port in Naver Comic Viewer prior…8.8
• CVE-2021-33592NAVER Toolbar before 4.0.30.323 allows remote attackers to e…9.8
• CVE-2021-33593Whale browser for iOS before 1.14.0 has an inconsistent user…5.3
• CVE-2021-33594An address bar spoofing vulnerability was discovered in Safe…3.5
• CVE-2021-33596Showing the legitimate URL in the address bar while loading …4.1
• CVE-2021-33597A Denial-of-Service (DoS) vulnerability was discovered in F-…5.5
• CVE-2021-33598A Denial-of-Service (DoS) vulnerability was discovered in al…6.5
• CVE-2021-33599A vulnerability affecting F-Secure Antivirus engine was disc…5.5
• CVE-2021-33600A denial-of-service (DoS) vulnerability was discovered in th…7.5
• CVE-2021-33601A vulnerability was discovered in the web user interface of …8.8