Skip to content
Noroxi

Brave records

24 published records for vendor brave.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
16.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

24 records
  • CVE-2016-10718
    34Monitor

    Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.

    HighCVSS 7.5Proof of conceptEPSS 12%

    brave · brave browserApr 3, 2018

  • CVE-2021-45884
    31Monitor

    In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fallback are enabled,

    HighCVSS 7.5No exploitEPSS 3%

    brave · braveDec 27, 2021

  • CVE-2024-37406
    30Monitor

    In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to dom

    HighCVSS 7.5No exploitEPSS 0%

    brave · android browserSep 18, 2024

  • CVE-2017-18256
    27Monitor

    Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long alert() argument in JavaS

    MediumCVSS 6.5Proof of conceptEPSS 4%

    brave · brave browserApr 3, 2018

  • CVE-2021-22917
    26Monitor

    Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowi

    MediumCVSS 6.5No exploitEPSS 1%

    brave · browserJul 12, 2021

  • CVE-2022-47932
    26Monitor

    Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns

    MediumCVSS 6.5No exploitEPSS 1%

    brave · braveDec 24, 2022

  • CVE-2022-47934
    26Monitor

    Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file tha

    MediumCVSS 6.5No exploitEPSS 1%

    brave · braveDec 24, 2022

  • CVE-2017-8458
    26Monitor

    Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear

    MediumCVSS 6.5No exploitEPSS 1%

    brave · braveMay 3, 2017

  • CVE-2022-47933
    26Monitor

    Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme.

    MediumCVSS 6.5No exploitEPSS 0%

    brave · braveDec 24, 2022

  • CVE-2018-10798
    26Monitor

    A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux).

    MediumCVSS 6.5No exploitEPSS 0%

    brave · braveMay 8, 2018

  • CVE-2018-10799
    26Monitor

    A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux).

    MediumCVSS 6.5No exploitEPSS 0%

    brave · braveMay 8, 2018

  • CVE-2021-22916
    24Monitor

    In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblock

    MediumCVSS 5.9No exploitEPSS 2%

    brave · braveJul 12, 2021

  • CVE-2021-22929
    24Monitor

    An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps o

    MediumCVSS 6.1No exploitEPSS 0%

    brave · braveAug 31, 2021

  • CVE-2023-22798
    24Monitor

    Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists removed redirect interceptors on some websi

    MediumCVSS 6.1No exploitEPSS 0%

    brave · adblock-listsFeb 9, 2023

  • CVE-2023-52263
    24Monitor

    Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect.

    MediumCVSS 6.1No exploitEPSS 0%

    brave · browserDec 30, 2023

  • CVE-2023-28364
    24Monitor

    An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned

    MediumCVSS 6.1No exploitEPSS 0%

    brave · browserJun 30, 2023

  • CVE-2022-30334
    22Monitor

    Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers.

    MediumCVSS 5.3No exploitEPSS 2%

    brave · braveMay 7, 2022

  • CVE-2021-21323
    22Monitor

    Regression in DNS leakage from Tor windows

    MediumCVSS 5.3No exploitEPSS 2%

    brave · braveFeb 23, 2021

  • CVE-2020-8276
    22Monitor

    The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the timestamp of when the use

    MediumCVSS 5.5No exploitEPSS 0%

    brave · braveNov 9, 2020

  • CVE-2017-8459
    21Monitor

    Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way.

    MediumCVSS 5.3No exploitEPSS 0%

    brave · braveMay 3, 2017

  • CVE-2016-9473
    19Monitor

    Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to tr

    MediumCVSS 4.7No exploitEPSS 1%

    brave · browserMar 27, 2017

  • CVE-2017-1000461
    18Monitor

    Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the "JS fingerprinting b

    MediumCVSS 4.7No exploitEPSS 1%

    brave · browserJan 3, 2018

  • CVE-2018-1000815
    17Monitor

    Brave Software Inc.

    MediumCVSS 4.3No exploitEPSS 1%

    brave · braveDec 20, 2018

  • CVE-2023-28360
    17Monitor

    An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file t

    MediumCVSS 4.3No exploitEPSS 0%

    brave · braveMay 11, 2023