CVE-2026-119730

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

EUVD-2026-114365

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

CVE-2026-119730

Maxthon Browser for Android versions before 7.5.8.103 are vulnerable to an address bar spoofing flaw. The issue stems from a lack of persistent fullscreen notifications or trusted origin indicators when the Fullscreen API is invoked. This allows remote attackers to craft malicious web pages that ...

CVE-2026-119730 Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

PT-2026-134131

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

CVE-2026-119730: Maxthon Technology Limited Maxthon Browser for Android: Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote…

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can cra...

Maxthon: undisclosed vulnerability (ZAI-2026-7M9D3T)

Not disclosed. Details are not yet publicly disclosed...

EUVD-2006-6967

Malware in sbrugna...

EUVD-2005-1093

Malware in sbrugna...

EUVD-2010-5205

Malware in sbrugna...

EUVD-2008-3653

Malware in sbrugna...

EUVD-2019-7214

Malware in sbrugna...

EUVD-2009-2991

Malware in sbrugna...

EUVD-2009-3002

Malware in sbrugna...

EUVD-2005-1094

Malware in sbrugna...

EUVD-2005-0906

Malware in sbrugna...

EUVD-2014-1525

Malware in sbrugna...

EUVD-2012-6576

Malware in sbrugna...

CVE-2012-10032

Maxthon3 version 3.2.2 build 1000 and prior are vulnerable to cross context scripting XCS via the about:history page. The browser’s trusted zone improperly handles injected script content, allowing attackers to execute arbitrary JavaScript in a privileged context. This flaw enables modification o...

CVE-2012-10032

Maxthon3 before version 3.3 is vulnerable to cross-context scripting (XCS) via the about:history page. The trusted zone may execute injected script content with privileged context, enabling modification of browser configuration and execution of arbitrary code through Maxthon’s exposed DOM APIs (e...