CVE-2026-119730

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

EUVD-2026-114365

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

CVE-2026-119730

Maxthon Browser for Android versions before 7.5.8.103 are vulnerable to an address bar spoofing flaw. The issue stems from a lack of persistent fullscreen notifications or trusted origin indicators when the Fullscreen API is invoked. This allows remote attackers to craft malicious web pages that ...

CVE-2026-119730 Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

CVE-2026-119730: Maxthon Technology Limited Maxthon Browser for Android: Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote…

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

CVE-2026-109434

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

EUVD-2026-104568

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

CVE-2026-109434

Fenrir Sleipnir Browser for Android before version 3.9.0 is vulnerable to a UI spoofing flaw. By utilizing the Fullscreen API to enter fullscreen mode, remote attackers can bypass persistent notifications or trusted-origin indicators to impersonate the browser's trusted address bar. This allows t...

CVE-2026-109434 Sleipnir Browser < 3.9.0 Fullscreen Address Bar Spoofing

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

CVE-2026-109434: User Interface (UI) Misrepresentation of Critical Information

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

PT-2026-117568

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

CVE-2026-78997: Improper Neutralization of Input During Web Page Generation

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

CVE-2021-25262: Improper Encoding or Escaping of Output

Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack...

CVE-2022-28868: Undefined Security Weakness

An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted malicious webpage/URL, user may be tricked for a short period of time until the page loads to think content may be coming from a valid domain, while the content comes from the...

PT-2022-19271

Name of the Vulnerable Software and Affected Versions Safe Browser for Android affected versions not specified Description An Address bar spoofing issue was discovered. When a user clicks on a specially crafted malicious webpage/URL, the user may be tricked into thinking the content comes from a...

F-Secure SAFE Cross-Site Script Vulnerability

F-Secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure.F-Secure SAFE Browser for Android is vulnerable to a cross-site scripting vulnerability that can be exploited by attackers to cause arbitrary code execution...

CVE-2021-40834: Improper Restriction of Rendered UI Layers or Frames

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

PT-2021-22970

Name of the Vulnerable Software and Affected Versions F-secure SAFE Browser for Android affected versions not specified Description A user interface overlay issue was found, allowing a remote attacker to perform a spoofing attack when a user clicks on a specially crafted URL, causing the browser ...

CVE-2020-27969: Origin Validation Error

Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing...

PT-2021-7164

Name of the Vulnerable Software and Affected Versions Yandex Browser for Android version 20.8.4 Description The issue is related to shortcomings in the data source confirmation mechanism, allowing remote attackers to bypass the Same-Origin Policy SOP and spoof the address bar. This can enable a...