zen-browser desktop

• CVE-2026-45150 Medium 6.3 Zen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing 0.3%
• CVE-2026-57501 None 0.0 Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction 0.5%
• CVE-2026-44659 Medium 4.7 Zen Browser Mac - Address Bar Spoofing via Long Subdomain 0.2%
• CVE-2026-44658 Low 2.4 Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab Creation 0.2%
• CVE-2026-41431 High 8.0 Zen Browser MAR updater ships with signature verification removed — unsigned updates accepted 0.2%