Design/Logic Flaw

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is caused by an incomplete fix for CVE-2022-47932 and CVE-2022-47934...

Design/Logic Flaw

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933...

CVE-2022-47934

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is caused by an incomplete fix for CVE-2022-47932 and CVE-2022-47934...

CVE-2022-47933

Brave Browser is affected by CVE-2022-47933 where an uncaught exception in ipfs_redirect_network_delegate_helper.cc (ipfs::OnBeforeURLRequest_IPFSRedirectWork()) allows a remote attacker to trigger a denial-of-service via a crafted HTML file referencing the IPFS scheme. Impact is a crash/DoS; exp...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in versions prior to Brave Browser 1.43.34 that originated from a vulnerability that allows remote attackers to cause a denial of service via a crafted HTML file...

CVE-2022-47934

CVE-2022-47934 affects Brave Browser prior to 1.43.88. A DoS can be triggered in private and guest windows by a crafted HTML file referencing ipfs:// or ipns:// URLs, stemming from an incomplete fix for CVE-2022-47932 and CVE-2022-47934. Affected component is Brave Browser’s HTML handling; root c...

CVE-2022-47934

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is caused by an incomplete fix for CVE-2022-47932 and CVE-2022-47934...

PT-2022-28092 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser versions prior to 1.43.34 Description: The issue allows a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is due to an incomplete fix for a previous issue...

CVE-2022-47933

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequestIPFSRedirectWork in ipfsredirectnetworkdelegatehelper.cc...

PT-2022-28093 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser versions prior to 1.42.51 Description: The issue allows a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This is caused by an uncaught exception in the function...

CVE-2022-47933

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequestIPFSRedirectWork in ipfsredirectnetworkdelegatehelper.cc...

PT-2022-7098 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser affected versions not specified Description: The issue is related to incorrect memory cleanup or deallocation in the Brave Browser, which can be exploited by a remote attacker using a specially crafted html file to cause a denia...

CVE-2022-47932

CVE-2022-47932 affects Brave Browser prior to 1.43.34. A remote attacker can cause a denial of service by serving a crafted HTML file that mentions an ipfs:// or ipns:// URL. The issue is described as a consequence of an incomplete fix for CVE-2022-47933, i.e., a related IPFS handling defect in t...

CVE-2022-47932

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933...

CVE-2022-47933

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequestIPFSRedirectWork in ipfsredirectnetworkdelegatehelper.cc...

CVE-2022-47934

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is caused by an incomplete fix for CVE-2022-47932 and CVE-2022-47934...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in Brave Browser versions prior to 1.43.88 that could allow a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file containing an ipfs:// or ipns:// URL...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in Brave Browser versions prior to 1.42.51, which originated from a vulnerability that could allow a remote attacker to cause a denial of service via a crafted HTML file that references an IPFS scheme...

CVE-2022-47932

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933...

Brave Software: S3 Bucket Takeover : brave-apt

An unclaimed S3 bucket was found on the domain brave.com, which was being used in the installation of brave-browser in Linux distros. An attacker could have taken over the S3 bucket and used it to spread malware or create a fake login page to spoof users. The vulnerability was reported to the...