CVE-2025-14812 — Address bar spoofing risk in Arc Search on iOS
ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, incr…
Published: 2025-12-19 · CVSS: 7.5 · CVSS 3.1
ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasing spoofing risk.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7