EUVD-2026-85565

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

CVE-2026-94181

Affected versions of the Arc browser are susceptible to an address bar spoofing issue. An attacker can spoof the browser address bar by utilizing a element that triggers requestFullscreen without displaying the standard fullscreen notification. Exploitation details are not provided in the docume...

CVE-2026-94181: User Interface (UI) Misrepresentation of Critical Information

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification...

PT-2026-97532

Name of the Vulnerable Software and Affected Versions Arc affected versions not specified Description An address bar spoofing issue exists where an attacker can manipulate the browser address bar. This is achieved using a element that triggers the requestFullscreen function without displaying the...

PT-2026-97533

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

CVE-2026-94183: User Interface (UI) Misrepresentation of Critical Information

Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI elements, such as a spoofed address bar,...

EUVD-2026-82583

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82586

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-70009

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69399

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-69399

Azure Arc is affected by an Elevation of Privilege vulnerability (CVE-2026-69399) rated CRITICAL with a CVSS 3.1 score of 10.0 . The attack vector is network-based , requires no privileges and no user interaction , and has changed scope with high impact on confidentiality, integrity, and availabi...

CVE-2026-70009

Azure Arc is affected by a path traversal vulnerability caused by improper limitation of a pathname to a restricted directory. An unauthenticated attacker can exploit this over the network to elevate privileges , achieving high integrity impact with low confidentiality impact and no availability ...

Azure Arc Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70009: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69399: Unintended Proxy or Intermediary

Azure Arc Elevation of Privilege Vulnerability...

PT-2026-95169

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to elevate privileges over a network. Path...

PT-2026-95167

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An elevation of privilege issue exists in Azure Arc, which could allow an attacker to gain higher permissions than intended. Recommendations At the moment, there is no information about a...

No title provided

A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service DoS...

No title provided

A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service DoS...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networks: Ethernet, ARC, EMAC: Quiesce interrupts before requesting the IRQ. Normal RX/TX interrupts are enabled later, in arcemacopen. Therefore, the probe should not detect any interrupt deliveries in the usual case. However, t...