Not rated
CVE-2021-22916 In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is…
Description
In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| https://github.com/brave/brave-core | Versions not published |
Other CVEs of https://github.com/brave/brave-core
The 4 CVEs of https://github.com/brave/brave-core →
CVE-2021-22929
An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that…
Not rated
CVE-2021-22917
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in…
Not rated
CVE-2020-8276
The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the…
Not rated