{"id":"CVE-2026-119730","title":"Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing","summary":"Maxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin ind…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvssSource":"cna","cwe":["CWE-451"],"vendor":"Maxthon Technology Limited","product":"Maxthon Browser for Android","affected":["maxthon_browser_for_android < 7.5.8.103"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T02:31:16.923230Z"},"published":"2026-10-30","updated":"2026-11-05","sourceUpdated":"2026-11-05T02:31:26.219Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119730","references":[{"url":"https://www.maxthon.com/history","label":"Release Notes"},{"url":"https://www.vulncheck.com/advisories/maxthon-browser-for-android-fullscreen-address-bar-spoofing","label":"VulnCheck Advisory: Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing"}],"tags":["cve.org"],"epss":0.00248,"epssPercentile":0.16157,"ingestedAt":"2026-11-05T21:36:00.693Z","slug":"CVE-2026-119730","body":"## Overview\n\nMaxthon Browser for Android before 7.5.8.103 contains an address bar spoofing vulnerability that allows remote attackers to misrepresent a page's origin by exploiting the lack of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is invoked. Attackers can craft a malicious web page that renders a counterfeit address bar showing a trusted domain while displaying attacker-controlled content, tricking users who perform a single tap to enter fullscreen into disclosing credentials via phishing.\n\n## Affected\n\n- `maxthon_browser_for_android < 7.5.8.103`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}