CVE-2026-94181

7.4 HIGH

Published 2026-09-23 · Updated 2026-09-24

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a <select> element that triggers requestFullscreen without displaying the fullscreen notification.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Weaknesses

CWE-451

All references

https://arc.net/security/bulletins#cve-2026-94181-address-bar-spoof-risk-missing-fullscreen-notification-via-select-element
https://hackerone.com/reports/3711701

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-102305
UNSCOREDCVE-2026-102312
MEDIUMCVE-2026-102314
HIGHCVE-2026-94183
MEDIUMCVE-2026-95279
MEDIUMCVE-2026-95288
MEDIUMCVE-2026-95291
MEDIUMCVE-2026-95294

Related by shared AI tags and CWE weakness class. Browse the full archive.