Read the docs

Thebrowser

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Thebrowser records in CISA KEV

No Thebrowser vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Arc 1 record MEDIUM Arc Search 1 record LOW

Records

1 record in Arc Search · all components

TI-2026-02013 CVE-2026-2378 · GHSA-43v8-mm65-g3xj

Address bar spoofing risk in ArcSearch on Android

Priority LOW 32

ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00201 Published 2026-03-20 Fixed in 1.12.7 CWE-1021
Open these records in search →