CVE-2021-40834

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack.

• CWE-1021

• https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fameVendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-40834Vendor Advisory
• https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fameVendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-40834Vendor Advisory

Published

Dec 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40829Connections initialized by the AWS IoT Device SDK v2 for Jav…8.8
• CVE-2021-4083A read-after-free memory flaw was found in the Linux kernel'…7
• CVE-2021-40830The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js …8.8
• CVE-2021-40831The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js …7.2
• CVE-2021-40832A Denial-of-Service (DoS) vulnerability was discovered in F-…6.5
• CVE-2021-40833A vulnerability affecting F-Secure antivirus engine was disc…5.5
• CVE-2021-40835An URL Address bar spoofing vulnerability was discovered in …4.3
• CVE-2021-40836A vulnerability affecting F-Secure antivirus engine was disc…5.5
• CVE-2021-40837A vulnerability affecting F-Secure antivirus engine before C…5.3
• CVE-2021-40839The rencode package through 1.0.6 for Python allows an infin…7.5
• CVE-2021-4084pimcore is vulnerable to Improper Neutralization of Input Du…6.1
• CVE-2021-40840A Stored XSS issue exists in the admin/users user administra…5.4