The CVE-2026-96614 vulnerability in the GEO CORPORATION's 'ゲオアプリ' application allows an attacker to cause the application's in-app browser to access an arbitrary website due to improper authorization in the handler for a custom URL scheme. This could potentially lead to phishing attacks or disclosure of a service's session ID. The vulnerability has a CVSS score of 5.1 and a severity of MEDIUM. Defenders r [truncated]
The CVE-2026-105271 vulnerability in the 'ゲオアプリ' application provided by GEO CORPORATION involves the cleartext storage of sensitive information, which could allow an attacker to obtain user passwords. This issue has a CVSS score of 5.1, indicating a medium severity level. The vulnerability was published on October 15, 2026, and has not been modified since then.