WS-2023-0207

Brave Shield for iOS is weak against IDN homograph attacks. This may lead users to be deceived into believing that the site is legitimate...

WS-2023-0206

The Phishing/Malware site blocking on Brave iOS can be bypassed with trailing dot in hostname. An attacker can take a to a prohibited malware/phishing site with bypassing Brave Shield protection...

Brave Software: DNS Leaks when using any VPN Browser extension with Brave Shield enabled

If Brave Shield is enabled alongside with a VPN Chrome extension and adblocking is enabled, some DNS requests may not be forwarded through the VPN tunnel...

Brave Software: URL Spoof / Brave Shield Bypass

Summary: Improper URL parsing in Brave allows an attacker to spoof the hostname shield settings are applied to. POC: https://youtu.be/yz99TTrfuc Products affected: Brave browser-laptop 0.18.14 rev ad92d02 Steps To Reproduce: 1. Browse to http://brave.com 2. Click on the Shield icon and toggle the...