Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-2378

Address bar spoofing risk in ArcSearch on Android

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
BCNY

Description

ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The BrowserCompany of New York ArcSearch

Default version status: unaffected

  • 0 to < 1.12.7affected

References