Thebrowser vulnerabilities
Published CVEs affecting Thebrowser products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-2378
Medium · 6.5
CWE-1021 Mar 20, 2026
Address bar spoofing risk in ArcSearch on Android
ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.