CVE-2025-14809

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.

Score

CVSS 3.1 7.4 High

Status

Deferred - 59469e6c-7ea7-446f-8e43-06aa32c115e8

Published

2025-12-19

Last modified

2025-12-19

Weaknesses

CWE-1021

Affected products

• Arcsearch (The Browser Company Of New York)

References

• https://arc.net/security/bulletins#cve-2025-14809-address-bar-spoofing-risk-navigation-trigger-uri-confusion-on-arcsear…