BR
Product
Brave
18
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 17Low 0
Watch
Add Brave to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-47934 | 6.5 | Dec 24 | Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL Affected: before 1.43.88 |
| CVE-2022-47933 | 6.5 | Dec 24 | Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme Affected: before 1.42.51 |
| CVE-2022-47932 | 6.5 | Dec 24 | Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL Affected: before 1.42.51 |
| CVE-2018-10799 | 6.5 | May 8 | A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux) Affected: before 0.14.0 |
| CVE-2018-10798 | 6.5 | May 8 | A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux) Affected: before 0.14.0 |
| CVE-2017-8458 | 6.5 | May 3 | Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear UI indication that it is not a… Affected: 0.12.4 |
| CVE-2021-22929 | 6.1 | Aug 31 | An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in… Affected: before 1.28.62 |
| CVE-2021-22916 | 5.9 | Jul 12 | In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that… Affected: 1.17.0 through 1.26.60 |
| CVE-2020-8276 | 5.5 | Nov 9 | The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the timestamp of when the user last opened an incognito window,… Affected: 1.1 through 1.18.35 |
| CVE-2026-48202 New | 5.3 | Oct 29 | WordPress Brave plugin <= 0.8.8 - Content Injection vulnerability Affected: through 0.8.8 |
| CVE-2025-68508 | 5.3 | Dec 24 | WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability Affected: through 0.8.3 |
| CVE-2022-30334 | 5.3 | May 7 | Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers Affected: before 1.34 |
| CVE-2021-21323 | 5.3 | Feb 23 | Brave is an open source web browser with a focus on privacy and security Affected: 1.17.73 through 1.20.103 |
| CVE-2017-8459 | 5.3 | May 3 | Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way Affected: 0.12.4 |
| CVE-2024-35655 | 4.8 | Jun 4 | WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability Affected: through 0.6.9 |
| CVE-2023-28360 | 4.3 | May 11 | An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file there was no download safety check… Affected: before 1.48.171 |
| CVE-2018-1000815 | 4.3 | Dec 20 | Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript() in… Affected: 0.22.810 through 0.24.0 |
Showing 17