What’s Vulnerable › Products

zen-browser desktop vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your zen-browser desktop version is affected

Latest zen-browser desktop vulnerabilities

• CVE-2026-45150 — Zen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing (CVSS 6.3)
• CVE-2026-57501 — Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction (CVSS 0.0)
• CVE-2026-44659 — Zen Browser Mac - Address Bar Spoofing via Long Subdomain (CVSS 4.7)
• CVE-2026-44658 — Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab Creation (CVSS 2.4)
• CVE-2026-41431 — Zen Browser MAR updater ships with signature verification removed — unsigned updates accepted (CVSS 8.0)