CVE-2024-52928
📋 TL;DR
This vulnerability in the Arc browser for Windows allows websites with previously granted permissions to add new permissions when users click anywhere on the page. It affects Arc browser users on Windows who have granted any permissions to websites.
💻 Affected Systems
- Arc Browser
📦 What is this software?
Arc by Thebrowser
⚠️ Risk & Real-World Impact
Worst Case
Attackers could gain full control over browser permissions, accessing sensitive data like camera, microphone, location, and notifications without user consent.
Likely Case
Malicious websites could silently add permissions for notifications, location access, or other capabilities to track users or deliver unwanted content.
If Mitigated
With proper browser updates and user awareness, impact is limited to temporary inconvenience from unwanted permissions.
🎯 Exploit Status
Exploitation requires user interaction (clicking anywhere on malicious page) but is trivial once initial permissions are granted.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 1.26.1
Vendor Advisory: https://arc.net/security/bulletins#windows-site-settings-bypass-cve-2024-52928
Restart Required: Yes
Instructions:
1. Open Arc browser. 2. Click menu → About Arc. 3. Browser will auto-update if not on 1.26.1+. 4. Restart browser when prompted.
🔧 Temporary Workarounds
Disable site permissions
windowsRevoke all website permissions in Arc settings
Open Arc → Settings → Privacy and Security → Site Settings → Review and remove permissions
Use alternative browser
windowsTemporarily switch to another browser until patched
🧯 If You Can't Patch
- Avoid clicking on untrusted websites, especially those with existing permissions
- Regularly review and clear site permissions in Arc settings
🔍 How to Verify
Check if Vulnerable:
Check Arc version in menu → About Arc. If version is below 1.26.1, you are vulnerable.Check Version:
Open Arc browser and navigate to menu → About ArcVerify Fix Applied:
Confirm version is 1.26.1 or higher in About Arc menu.📡 Detection & Monitoring
Log Indicators:
- Unexpected permission grants in browser logs
- Multiple permission requests from same site
Network Indicators:
- Sites requesting unusual permissions combinations
SIEM Query:
browser:arc AND event:permission_grant AND version:<1.26.1