DuckDuckGo Browser UXSS Flaw in AutoConsent JS Bridge Enables Cross

Back Cyberpress

DuckDuckGo Browser UXSS Flaw in AutoConsent JS Bridge Enables Cross

Cyberpress • March 2, 2026

Share: View original

Dubbed a Universal Cross-Site Scripting (uXSS) flaw, it exploits the AutoConsentAndroid JavaScript bridge.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

uXSS Vulnerability in DuckDuckGo Browser's AutoConsent JS Bridge Discovered A Universal Cross-Site Scripting (uXSS) vulnerability has been identified in the DuckDuckGo browser, specifically within the AutoConsent JavaScript bridge. This flaw allows attackers to exploit the bridge, potentially compromising user security. Users of the DuckDuckGo browser are affected by this vulnerability. 3 sources 31

Extracted Entities

Platforms (1)

DuckDuckGo Browser

Vulnerabilities (1)