Maxthon Browser For Android
Monthly
Address bar spoofing in Maxthon Browser for Android before 7.5.8.103 lets a malicious page render a counterfeit address bar showing a trusted domain while displaying attacker-controlled content, once the victim taps to enter fullscreen. The missing persistent fullscreen notification or trusted-origin indicator turns the browser chrome itself into a phishing surface, so impact is limited to integrity of what the user perceives rather than any direct confidentiality or availability loss. Exploitation depends on the victim visiting the attacker's page and completing a single tap, so it is a social-engineering enabler rather than automated compromise; no public exploit identified at time of analysis, and the vuln.today decision label places remediation in the this_month bucket.
Address bar spoofing in Maxthon Browser for Android before 7.5.8.103 lets a malicious page render a counterfeit address bar showing a trusted domain while displaying attacker-controlled content, once the victim taps to enter fullscreen. The missing persistent fullscreen notification or trusted-origin indicator turns the browser chrome itself into a phishing surface, so impact is limited to integrity of what the user perceives rather than any direct confidentiality or availability loss. Exploitation depends on the victim visiting the attacker's page and completing a single tap, so it is a social-engineering enabler rather than automated compromise; no public exploit identified at time of analysis, and the vuln.today decision label places remediation in the this_month bucket.