VulnerabilityModified

CVE-2021-44751

A vulnerability affecting F-Secure SAFE browser was discovered.

MEDIUM 5.3EPSS 0.57%

Does this matter?

Lower severity and a low EPSS score (0.57%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD messages or perform unwanted calls. In most modern Android OS, dialer application will require user interaction, however, some older Android OS may not need user interaction.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS: 0.57% probability · 46th percentile
CISA KEV: Not listed
Weakness: CWE-276
Affected: f-secure/safe
Source: cve-notifications-us@f-secure.com

References

https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fameNot Applicable
https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fameNot Applicable

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.