1. Home
  2. CVE Database
  3. CVE-2026-2378
HIGH · 7.4

CVE-2026-2378

ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web co...

Vulnerability Description

ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.

CVSS Score

7.4

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
ThebrowserArc Search< 1.12.7

Related Weaknesses (CWE)

CWE-1021

References

FAQ

What is CVE-2026-2378?

CVE-2026-2378 is a vulnerability with a CVSS score of 7.4 (HIGH). ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web co...

How severe is CVE-2026-2378?

CVE-2026-2378 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-2378?

Check the references section above for vendor advisories and patch information. Affected products include: Thebrowser Arc Search.