---
id: 4467
title: "CM Browser: HTTPS URL Leak"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/cm-browser-https-url-leak.html"
published_at: "2019-11-13T23:00:00Z"
tags: ["android", "privacy", "vulnerability", "https", "browser", "cmbrowser"]
phying_url: "https://phying.com/item/4467"
lang: en
---

# CM Browser: HTTPS URL Leak

## Summary

A vulnerability in Cheetah Mobile's CM Browser (50M+ installs) sends a device's full HTTPS URLs and query parameters to a remote server despite encrypted transport, leaking browsing activity.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2019-11-13T23:00:00Z
- **Original:** https://blog.quarkslab.com/cm-browser-https-url-leak.html
- **Phying News:** https://phying.com/item/4467