Maxthon3 about:history XCS Trusted Zone Code Execution

Advisories

severity: high
date: August 5, 2025
Affecting: Maxthon3 Browser 3.1.7 build 600 - 3.2.2 build 1000
CVE: CVE-2012-10032
CVE type: Cross-Site Scripting
CVSS: 8.7
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References: Researcher Disclosure
Metasploit Module
EDB-23225 (Metasploit)
Product Site
Credit: Roberto Suggi Liverani