Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-94183

Address bar spoofing risk in affected Android versions of Arc Search

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar, misleading the user about the origin of displayed content and increasing the risk of phishing.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
The Browsercompany Of New York
Products
Arcsearch
CVE-2026-18534

Address bar spoofing risk in affected iOS versions of Arc Search

ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
The Browsercompany Of New York
Products
Arcsearch
CVE-2026-12348

Address Bar Spoofing in Arc Search for Android (window.open race condition)

Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain in the address bar while rendering attacker-controlled content, enabling phishing.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
The Browsercompany Of New York
Products
Arcsearch
CVE-2026-2378

Address bar spoofing risk in ArcSearch on Android

ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
The Browsercompany Of New York Thebrowser
Products
Arcsearch Arc Search