CVE-2014-1449: Maxthon Cloud Browser

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API.

Affected products

• Maxthon Maxthon Cloud Browser: up to and including 4.1.5.2000

Published 2014-12-25. Last modified 2026-06-17.