Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-96614

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GEO CORPORATION "ゲオアプリ" for Android

Default version status: unaffected

  • 0 to ≤ 11.8.6affected

GEO CORPORATION "ゲオアプリ" for iOS

Default version status: unaffected

  • 0 to ≤ 11.8.6affected

References