CVE-2026-2378 — Address bar spoofing risk in ArcSearch on Android
ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interac…
Published: 2026-03-20 · CVSS: 7.4 · CVSS 3.1
ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7