Security Notification Flaw in Zen Browser by Zen Technologies

CVE-2026-45150

What is CVE-2026-45150?

Prior to version 1.19.13b, Zen Browser, a Firefox-based browser developed by Zen Technologies, lacked a persistent and visible security notification when entering fullscreen mode. This vulnerability allowed malicious webpages to obscure the genuine browser interface and origin details, enabling attackers to mimic the appearance of legitimate sites. Coupled with practices like long-domain URL eliding, this flaw posed a risk for phishing attacks and credential theft, ultimately compromising user security and trust. The issue has been addressed in the latest update.

References