CVE-2026-94183
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar, misleading the user about the origin of displayed content.
Risk Assessment
Users may be misled about the true origin of displayed content, increasing the risk of phishing attacks and credential theft.
Recommendation
Update Arc Search for Android to version 1.12.10 or later.
Other vulnerabilities in Arc Search for Android
Original NVD description (English source)
Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar, misleading the user about the origin of displayed content and increasing the risk of phishing.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS