Advisories · Technology

zen-browser desktop.

Every CVE that names zen-browser desktop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-45150 CVE record

CVSS 6.3 Medium

Zen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing
- zen-browser desktop
- CWE-451
Not analysed yet 15 Jul 2026
CVE-2026-57501 CVE record

CVSS 0.0 None

Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction
- zen-browser desktop
- Privilege escalation
Not analysed yet 9 Jul 2026
CVE-2026-44659 CVE record

CVSS 4.7 Medium

Zen Browser Mac - Address Bar Spoofing via Long Subdomain
- zen-browser desktop
- CWE-451
Not analysed yet 11 May 2026
CVE-2026-44658 CVE record

CVSS 2.4 Low

Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab Creation
- zen-browser desktop
- CWE-20
Not analysed yet 11 May 2026
CVE-2026-41431 CVE record

CVSS 8.0 High

Zen Browser MAR updater ships with signature verification removed — unsigned updates accepted
- zen-browser desktop
- Weak cryptography or TLS
Not analysed yet 11 May 2026