CVE-2026-18534

ArcSearch for iOS versions prior to 1.48.0 is vulnerable to a spoofing attack due to the address bar remaining hidden after a page-initiated scroll, enabling malicious content to mimic legitimate browser interface elements. This could lead to users being misled into interacting with fraudulent sites or content. Developers and security teams managing iOS applications should prioritize this vulnerability to mitigate potential risks to user trust and data security.