Export limit exceeded: 396954 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 396954 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (4 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-94183 | 1 The Browsercompany Of New York | 1 Arcsearch | 2026-09-23 | 7.4 High |
| Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar, misleading the user about the origin of displayed content and increasing the risk of phishing. | ||||
| CVE-2026-18534 | 1 The Browsercompany Of New York | 1 Arcsearch | 2026-08-18 | 7.4 High |
| ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk. | ||||
| CVE-2026-12348 | 1 The Browsercompany Of New York | 1 Arcsearch | 2026-06-26 | 7.4 High |
| Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain in the address bar while rendering attacker-controlled content, enabling phishing. | ||||
| CVE-2026-2378 | 2 The Browsercompany Of New York, Thebrowser | 2 Arcsearch, Arc Search | 2026-04-16 | 7.4 High |
| ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content. | ||||
Page 1 of 1.