Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-18534

Address bar spoofing risk in affected iOS versions of Arc Search

Description

ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Browser Company of New York ArcSearch

Default version status: unaffected

  • 0 to < 1.48.0affected

References