CyberSecBulletin

The Browser Company vulnerabilities

We track 1 vulnerability in The Browser Company products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 20, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest The Browser Company vulnerabilities

  • 9.8 Critical severity

    arc: Improper Access Control

    CVE-2024-45489The Browser CompanyEPSS 1.24%

    Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by default; however (because of misconfigured Firebase ACLs), it is possible to create or update a boost using another user's ID. This installs