{"id":"CVE-2026-96614","revision":"ceb84ff342a64a1d9c2bade28ebfe2dc","records":[{"revision":"ceb84ff342a64a1d9c2bade28ebfe2dc","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-96614","aliases":[],"title":"\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishin…","description":"\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.","state":0,"publishedAt":"2026-10-15T08:25:39.167+00:00","modifiedAt":"2026-10-15T14:19:54.516+00:00","affected":[{"ecosystem":"Vendor product","name":"\"ゲオアプリ\" for Android","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"GEO CORPORATION\",\n                    \"product\": \"\\\"ゲオアプリ\\\" for Android\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"lessThanOrEqual\": \"11.8.6\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"\"ゲオアプリ\" for iOS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"GEO CORPORATION\",\n                    \"product\": \"\\\"ゲオアプリ\\\" for iOS\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"lessThanOrEqual\": \"11.8.6\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","score":5.4,"severity":"MEDIUM"},{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","score":5.1,"severity":"MEDIUM"}],"references":["https://play.google.com/store/apps/details?id=jp.co.geoonline.app&hl=ja","https://apps.apple.com/jp/app/id590190880","https://jvn.jp/en/jp/JVN40460777/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-96614","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-96614","identifiers":["CVE-2026-96614"]},"retained":false,"historicalAffected":[]}],"coverage":[]}