CVE-2026-94183 — Address bar spoofing risk in affected Android versions of Arc Search
Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote …
Published: 2026-09-23 · CVSS: 7.4 · CVSS 3.1
Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar, misleading the user about the origin of displayed content and increasing the risk of phishing.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7