CVE-2026-96614
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme.
Published Oct 15, 2026 · updated Oct 15, 2026 · JVN "ゲオアプリ" for Android
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · NIST NVD
Detected
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.
Oct 15, 2026 · NIST NVD
Updated
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.
Affected
- vendor GEO CORPORATION "ゲオアプリ" for Androidversion unspecified
- vendor GEO CORPORATION "ゲオアプリ" for iOSversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-96614
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's s
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-96614
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-96614
30-day exploitation probability 0.2%
first.org - JVNGovernment advisoryCVE-2026-96614
JVN#40460777: Multiple vulnerabilities in "ゲオアプリ"
jvn.jp - NIST NVDVulnerability recordCVE-2026-96614
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's s
nvd.nist.gov