ArcSearch for iOS Address Bar Spoofing Vulnerability via Iframe-Triggered URI Navigation
Vulnerability
A vulnerability in ArcSearch for iOS, affecting versions prior to 1.45.2, could lead to address bar spoofing. After an iframe-triggered URI-scheme navigation, the displayed domain might not match the content, increasing the risk of deception.
Impact
Exploitation of this vulnerability could mislead users about the authenticity of the website they are viewing, potentially leading to phishing or other spoofing attacks.
Remediation
Users are advised to update ArcSearch on iOS to version 1.45.2 or newer, which includes the necessary fix.
Added: Dec 19, 2025, 5:28 PM
Updated: Dec 19, 2025, 6:11 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.4remediation
7.7relevance
1.6threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.