CVE Catalog
CVE-2026-18534
HighCVSS 7.4Summary
ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk.
Risk Assessment
The risk is the possibility of deceiving users into thinking that interaction with fake interface elements is safe, which could lead to data phishing or malware installation.
Recommendation
It is recommended to update ArcSearch to version 1.48.0 or later, which includes a fix preventing the address bar from remaining hidden.
Original NVD description (English source)
ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk.