Address Bar Spoofing Vulnerability in ArcSearch for Android by Arc
CVE-2025-14809

7.4HIGH

Key Information:

Vendor

The Browser Company Of New York

Status
Arcsearch
Vendor
CVE Published:
19 December 2025

What is CVE-2025-14809?

ArcSearch for Android, in versions earlier than 1.12.6, is susceptible to an address bar spoofing vulnerability. This issue allows a malicious actor to display a misleading domain in the browser's address bar, leading users to potentially dangerous content after interacting with specially crafted web content. This unintended behavior can exploit user trust and facilitate phishing attacks if not addressed promptly.

Affected Version(s)

ArcSearch Android 0 < 1.12.6

References

https://arc.net/security/bulletins#cve-2025-14809-address...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-14809 : Address Bar Spoofing Vulnerability in ArcSearch for Android by Arc