Vulnerabilities
Products Security index
Vulnerabilities
CVE-2026-119730
Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing
CVE-2012-10032
Maxthon3 about:history XCS Trusted Zone Code Execution
CVE-2019-16647
Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows.
CVE-2014-1449
The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API.
CVE-2010-5246
Multiple untrusted search path vulnerabilities in Maxthon Browser 1.6.7.35 and 2.5.15 allow local users to gain privileges via a Trojan horse (1) RSRC32.dll or (2) dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .html file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
