Vulnerability Details CVE-2026-2378
ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 9.1%
CVSS Severity
CVSS v3 Score 7.4
References
Products affected by CVE-2026-2378
-
cpe:2.3:a:thebrowser:arc_search:*