TI-2024-35424 CVE-2024-52928 · GHSA-xfj5-q6qf-8jjcArc before 1.26.1 on Windows has a bypass issue in the site settings that allows websites…Priority MEDIUM 43Arc before 1.26.1 on Windows has a bypass issue in the site settings that allows websites (with previously granted permissions) to add new permissions when the user clicks anywhere on the website.CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00472 · Published 2025-06-26 · No fix listed CWE-284