CVE-2026-94183

7.4 Élevée

Publiée le 23/09/2026 à 22:17 · Modifiée le 24/09/2026 à 21:36 · En attente d'analyse NVD · Source : 59469e6c-7ea7-446f-8e43-06aa32c115e8

Description

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar, misleading the user about the origin of displayed content and increasing the risk of phishing.

Traduire en français

Produits concernés

The Browser Company of New York Arc Search

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.4 Élevée	59469e6c-7ea7-446f-8e43-06aa32c115e8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-451

Références

https://arc.net/security/bulletins#cve-2026-94183-address-bar-spoof-risk-missing-fullscreen-notification-on-return-from-background
https://hackerone.com/reports/3572193

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories