CVE-2021-33593
Medium
Published: 02 November 2021
Published
02 November 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.0020
42.4th percentile
Risk Priority
11
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-33593 is a medium-severity User Interface (UI) Misrepresentation of Critical Information (CWE-451) vulnerability in Navercorp Whale. Its CVSS base score is 5.3 (Medium).
Operationally, ranked at the 42.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-20277
Vulnerability details
Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may lead to address bar spoofing.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
navercorp
whale
≤ 1.14.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.