CVE-2026-119730: Maxthon Technology Limited Maxthon Browser for

Описание

Оригинално описание

Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can craft a malicious web page that renders a counterfeit address bar showing a trusted domain while displaying attacker-controlled content, tricking users who perform a single tap to enter fullscreen into disclosing credentials via phishing.

Засегнати продукти

• Maxthon Technology Limited Maxthon Browser for Android: преди 7.5.8.103

Вид слабост

• CWE-451 Подвеждащо представяне на критична информация в интерфейса

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-119730
• https://nvd.nist.gov/vuln/detail/CVE-2026-119730
• https://www.maxthon.com/history
• https://www.vulncheck.com/advisories/maxthon-browser-for-android-fullscreen-address-bar-spoofing