Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-14812

Address bar spoofing risk in Arc Search on iOS

Description

ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasing spoofing risk.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Browser Company of New York ArcSearch

Default version status: unaffected

  • 0 to < 1.45.2affected

References