Arc Search vulnerabilities

2 known vulnerabilities in Arc Search from The Browser Company of New York. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Arc Search: User Interface (UI) Misrepresentation of Critical Information

  CVE-2026-94183Sep 23, 2026The Browser Company of New York

  Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI element

• 7.4 High severity

  Arc Search: Improper Restriction of Rendered UI Layers or Frames

  CVE-2026-12348Jun 17, 2026The Browser Company of New York

  Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain in the address bar while rendering attacker-controlled content, enabling phishing.