ArcSearch for Android Address Bar Spoofing Vulnerability
Vulnerability
A vulnerability in ArcSearch for Android, affecting versions prior to 1.12.6, could lead to address bar spoofing. The issue arises because the browser might display a different domain in the address bar than the content being shown. This discrepancy can create a spoofing risk after user interaction with crafted web content.
Impact
Exploitation of this vulnerability could mislead users about the authenticity of the website they are viewing, potentially leading to phishing or other malicious activities.
Remediation
Users are advised to update ArcSearch on Android to version 1.12.6 or newer, which includes the necessary fix.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.