CVE-2022-28868: Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android
An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted malicious webpage/URL, user may be tricked for a short period of time (until the page loads) to think content may be coming from a valid domain, while the content comes from the attacker controlled site.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-28868?
CVE-2022-28868 is an address bar spoofing vulnerability in Safe Browser for Android.
How does CVE-2022-28868 work?
When a user clicks on a specially crafted malicious webpage/URL, the user may be tricked into thinking that the content is coming from a valid domain, while it actually comes from a malicious source.
What is the severity of CVE-2022-28868?
CVE-2022-28868 has a severity rating of 4.3 out of 10, which is classified as medium severity.
Which version of F-secure Safe for Android is affected by CVE-2022-28868?
Version 18.6 of F-secure Safe for Android is affected by CVE-2022-28868.
How can I fix CVE-2022-28868?
To fix CVE-2022-28868, it is recommended to update to a patched version of F-secure Safe for Android.