CVE-2026-18534 | BDVDB-2026-360770 Detail
The Browser Company of New YorkArcSearch
Description#
ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk.
Impact#
CAPEC-148 Content Spoofing
Weaknesses#
- CWE-1021 Improper restriction of rendered UI layers or frames
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.