CVE-2025-14809: The Browser Company Of New York Arcsearch

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.

Affected products

• The Browser Company Of New York Arcsearch: before 1.12.6 (fixed in 1.12.6)

Published 2025-12-19. Last modified 2026-06-17.