CVE-2021-40835

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not carefully pay attention to url, user may be tricked to think content may be coming from a valid domain, while it comes from another. This is performed by using a very long username part of the url so that user cannot see the domain name. A remote attacker can leverage this to perform url address bar spoofing attack. The fix is, browser no longer shows the user name part in address bar.

• https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fameVendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisoriesVendor Advisory
• https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fameVendor Advisory
• https://www.f-secure.com/en/business/support-and-downloads/security-advisoriesVendor Advisory

Published

Dec 16, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4083A read-after-free memory flaw was found in the Linux kernel'…7
• CVE-2021-40830The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js …8.8
• CVE-2021-40831The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js …7.2
• CVE-2021-40832A Denial-of-Service (DoS) vulnerability was discovered in F-…6.5
• CVE-2021-40833A vulnerability affecting F-Secure antivirus engine was disc…5.5
• CVE-2021-40834A user interface overlay vulnerability was discovered in F-s…4.3
• CVE-2021-40836A vulnerability affecting F-Secure antivirus engine was disc…5.5
• CVE-2021-40837A vulnerability affecting F-Secure antivirus engine before C…5.3
• CVE-2021-40839The rencode package through 1.0.6 for Python allows an infin…7.5
• CVE-2021-4084pimcore is vulnerable to Improper Neutralization of Input Du…6.1
• CVE-2021-40840A Stored XSS issue exists in the admin/users user administra…5.4
• CVE-2021-40841A Path Traversal vulnerability for a log file in LiveConfig …6.5