CVE-2026-109434 - Sleipnir Browser 3.9.0 Fullscreen Address Bar Spoofing
Brief
CVE ID : CVE-2026-109434
Published : Oct. 19, 2026, 7:17 p. m.
- 38 minutes ago
Description : Fenrir Sleipnir Browser for Android before 3.
- 0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator.
Attackers can render a counterfeit address bar showing a trusted origin over attacker-controlled content after a single user tap, enabling credential harvesting, malware delivery, or social engineering through fake login, update, or payment pages.
Severity: 5.1
- MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...