Lucene search
+L

2444 matches found

RedhatCVE
RedhatCVE
added 2025/12/20 5:12 p.m.18 views

CVE-2025-14812

ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasing spoofing risk...

7.5CVSS6.6AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/20 5:12 p.m.17 views

CVE-2025-14809

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

7.4CVSS6.7AI score0.00202EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/19 5:15 p.m.18 views

CVE-2025-14809

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

7.4CVSS0.00202EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/19 4:39 p.m.12 views

EUVD-2025-204586

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

7.4CVSS6.2AI score0.00202EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/19 4:39 p.m.49 views

CVE-2025-14809

ArcSearch on Android versions prior to 1.12.6 is affected by an address-bar spoofing issue where the address bar could show a different domain than the displayed content after user interaction with crafted web content. The Root cause is described as navigation/URI confusion in the ArcSearch Andro...

7.4CVSS6.3AI score0.00202EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/19 4:39 p.m.6 views

CVE-2025-14809 Address bar spoofing risk in ArcSearch on Android

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

7.4CVSS6.3AI score0.00202EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/19 4:39 p.m.39 views

CVE-2025-14809 Address bar spoofing risk in ArcSearch on Android

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

7.4CVSS0.00202EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/19 4:38 p.m.21 views

CVE-2025-14812

CVE-2025-14812 affects ArcSearch for iOS (Browser Company) prior to version 1.45.2. Affected behavior: after iframe-triggered URI-scheme navigation, the address bar may display a different domain than the content being shown, enabling spoofing risk. Root cause (as described in connected sources):...

7.5CVSS6.2AI score0.00264EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/19 4:38 p.m.42 views

CVE-2025-14812 Address bar spoofing risk in Arc Search on iOS

ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasing spoofing risk...

7.5CVSS0.00264EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/19 4:38 p.m.9 views

CVE-2025-14812 Address bar spoofing risk in Arc Search on iOS

ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasing spoofing risk...

7.5CVSS6.2AI score0.00264EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/19 12:00 a.m.13 views

Browser Company ArcSearch 安全漏洞

Browser Company ArcSearch is a mobile browser from Browser Company, Inc. A security vulnerability exists in Browser Company ArcSearch versions prior to 1.12.6 that originates from address bar spoofing and could lead to misleading user interaction...

7.4CVSS6.4AI score0.00202EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.12 views

PT-2025-52488

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content...

7.4CVSS6.6AI score0.00202EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/19 12:00 a.m.10 views

Browser Company ArcSearch 安全漏洞

Browser Company ArcSearch is a mobile browser from the US-based Browser Company. A security vulnerability exists in Browser Company ArcSearch versions prior to 1.45.2 that stems from iframe-triggered URI navigation leading to address bar spoofing, which may increase the risk of spoofing...

7.5CVSS6.6AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/16 6:56 a.m.19 views

CVE-2025-14021

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS6.9AI score0.00207EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/15 7:15 a.m.13 views

CVE-2025-14021

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS0.00207EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/15 7:15 a.m.8 views

CVE-2025-14021

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS5.9AI score0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/15 6:41 a.m.41 views

CVE-2025-14021

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS0.00207EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/15 6:41 a.m.6 views

CVE-2025-14021

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS6.5AI score0.00207EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/15 6:41 a.m.8 views

EUVD-2025-203345

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS6.4AI score0.00207EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/15 6:41 a.m.20 views

CVE-2025-14021

CVE-2025-14021 concerns the LINE client for iOS (pre-14.14). The in‑app browser is vulnerable to address bar spoofing, allowing an attacker to render trusted URLs while executing malicious JavaScript in iframes, enabling phishing via overlayed content. The CVSS 3.1 base score is 4.3 (Medium); att...

4.3CVSS6.5AI score0.00207EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder