Vulnerabilidades do The Browser Company of New York ArcSearch
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam The Browser Company of New York ArcSearch: 5 registro(s), com versões afetadas e correções.
CVE-2026-94183
Alta · 7.4
CWE-451 23/09/2026
Address bar spoofing risk in affected Android versions of Arc Search
Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar, misleading the user about the origin of displayed content and increasing the risk of phishing.
CVE-2026-18534
Alta · 7.4
CWE-1021 18/08/2026
Address bar spoofing risk in affected iOS versions of Arc Search
ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk.
CVE-2026-2378
Média · 6.5
CWE-1021 20/03/2026
Address bar spoofing risk in ArcSearch on Android
ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.
CVE-2025-14812
Alta · 7.5
CWE-1021 19/12/2025
Address bar spoofing risk in Arc Search on iOS
ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasing spoofing risk.
CVE-2025-14809
Alta · 7.4
CWE-1021 19/12/2025
Address bar spoofing risk in ArcSearch on Android
ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.