Copy
Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect. This is related to browser/brave_content_browser_client.cc and browser/ui/webui/brave_web_ui_controller_factory.cc.
Max CVSS
6.1
Published
2023-12-30
Updated
2024-01-09
EPSS
0.05%
An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL.
Max CVSS
6.1
Published
2023-07-01
Updated
2023-07-10
EPSS
0.05%
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled.
Max CVSS
6.5
Published
2021-07-12
Updated
2022-08-30
EPSS
0.15%
Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality (that the browser intends to block).
Max CVSS
4.7
Published
2018-01-03
Updated
2019-10-03
EPSS
0.08%
Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names.
Max CVSS
4.7
Published
2017-03-28
Updated
2021-03-19
EPSS
0.16%
5 vulnerabilities found