CVE-2025-14809 - CVE House
Back to Database
Status published High CVE-2025-14809

Address bar spoofing risk in ArcSearch on Android

Vulnerability Description

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14809

Credits & Attribution

No credits recorded in the NVD database.

References

More from The Browser Company of New York

View All →
CVE-2025-15032
CVE-2025-15032: Increased Spoofing risk; custom new window missing about:blank
High 7.4
CVE-2025-14812
Address bar spoofing risk in Arc Search on iOS
High 7.5
CVE-2025-13132
Dia: Increased Spoof Risk; Missing full screen toast
High 7.4

Affected Vendor

The Browser Company of New York

View all reports →

Affected Software

ArcSearch
Vulnerable Versions:
0

Timeline

Official Publish: December 19th, 2025
Last Modified: December 19th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Weaknesses (CWE)

CWE-1021

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.