The Browser Company of New York

Products

ProductCVEsExploitedLatest
ArcSearch3–Aug 18, 2026
Arc Search2–Sep 23, 2026
Dia2–Jan 16, 2026
Arc1–Sep 23, 2026

Exploited and recent CVEs

  • CVE-2026-94183 High 7.4 Address bar spoofing risk in affected Android versions of Arc Search 0.4%
  • CVE-2026-94181 High 7.4 Address Bar Spoof Risk; Missing Fullscreen Notification via Select Element 0.3%
  • CVE-2026-18534 High 7.4 Address bar spoofing risk in affected iOS versions of Arc Search 0.3%
  • CVE-2026-12348 High 7.4 Address Bar Spoofing in Arc Search for Android (window.open race condition) 0.3%
  • CVE-2025-15032 High 7.4 CVE-2025-15032: Increased Spoofing risk; custom new window missing about:blank 0.3%
  • CVE-2025-14809 High 7.4 Address bar spoofing risk in ArcSearch on Android 0.2%
  • CVE-2025-14812 High 7.5 Address bar spoofing risk in Arc Search on iOS 0.3%
  • CVE-2025-13132 High 7.4 Dia: Increased Spoof Risk; Missing full screen toast 0.3%