Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-12348

Address Bar Spoofing in Arc Search for Android (window.open race condition)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
BCNY

Description

Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain in the address bar while rendering attacker-controlled content, enabling phishing.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Browser Company of New York` Arc Search

Default version status: unaffected

  • 0 to ≤ 1.12.8unaffected

References