637 matches found
Brave Desktop Browser Vulnerability Lets Malicious Sites Appear Trusted
A critical vulnerability in Brave Browser allows malicious websites to appear as trusted sources during file uploads/downloads. Learn…...
Brave Software: Null Pointer Dereference by Crafted Response from AI Model
The Brave browser was affected by a null pointer dereference vulnerability caused by a crafted response from an AI model. The vulnerability was triggered when the user set a malicious endpoint as the AI model's server endpoint. The code handling the server response assumed a specific structure...
CVE-2025-23086
On most desktop platforms, Brave Browser versions 1.70.x-1.73.x included a feature to show a site's origin on the OS-provided file selector dialog when a site prompts the user to upload or download a file. However the origin was not correctly inferred in some cases. When combined with an open...
CVE-2025-23086
CVE-2025-23086 affects Brave Browser (versions 1.70.x–1.73.x) and concerns the feature that shows a site’s origin in the OS file selector dialog when a user is prompted to upload or download a file. The issue arises because the origin could be inferred incorrectly in certain cases, and when combi...
CVE-2025-23086
On most desktop platforms, Brave Browser versions 1.70.x-1.73.x included a feature to show a site's origin on the OS-provided file selector dialog when a site prompts the user to upload or download a file. However the origin was not correctly inferred in some cases. When combined with an open...
CVE-2025-23086
On most desktop platforms, Brave Browser versions 1.70.x-1.73.x included a feature to show a site's origin on the OS-provided file selector dialog when a site prompts the user to upload or download a file. However the origin was not correctly inferred in some cases. When combined with an open...
Brave Browser 输入验证错误漏洞
Brave Browser is a fast, private and secure web browser for PC, Mac and mobile devices from Brave, Inc. An input validation error vulnerability exists in Brave Browser versions 1.70.x through 1.73.x. The vulnerability stems from the source of a site not being correctly identified in the file...
PT-2025-4816 · Brave · Brave Browser
Name of the Vulnerable Software and Affected Versions: Brave Browser versions 1.70.x through 1.73.x Description: The issue arises from a feature that displays a site's origin on the OS-provided file selector dialog when a site prompts the user to upload or download a file. However, the origin is...
Brave Desktop 1.74.48 Security Fixes
Fixed iframe download popup origin confusion as reported on HackerOne by syarif07. Upgraded Chromium to 132.0.6834.83 — refer to Google Chrome advisories for inherited CVEs...
Brave Android 1.73.105 Security Fixes
Fixed race condition which caused a crash in Brave Wallet as reported on HackerOne by renwa. Upgraded Chromium to 131.0.6778.265 — refer to Google Chrome advisories for inherited CVEs...
Brave Desktop 1.73.105 Security Fixes
Fixed race condition which caused a crash in Brave Wallet as reported on HackerOne by renwa. Upgraded Chromium to 131.0.6778.265 — refer to Google Chrome advisories for inherited CVEs...
PT-2025-1005
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 131.0.6778.264 Microsoft Edge versions prior to 131.0.6778.264 Brave versions prior to 131.0.6778.264 Description: The issue is related to a type confusion problem in the V8 engine of Google Chrome, which allow...
Brave Software: Incorrect security UI of files' download source on brave MacOS
The incorrect display of the download source in the Brave download alert was identified. Instead of displaying the actual source of the downloaded file, the browser displayed the referrer header value, which could have misled users into believing the file was from a trusted source...
Brave Desktop 1.70.117 Security Fixes
Added simulation support for EVM transactions. - Added simulation support for Solana transactions. Upgraded Chromium to 129.0.6668.59 — refer to Google Chrome advisories for inherited CVEs...
CVE-2024-37406
In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion...
CVE-2024-37406
In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion...
CVE-2024-37406
In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion...
CVE-2024-37406
Brave Android prior to v1.67.116 contains an issue in the Brave Shields popup where domains are elided from the right instead of the left, potentially causing domain confusion. The vulnerability affects the Brave Shields UI and can impact user perception of URLs presented in the popup. A fixed ve...
Brave 安全漏洞
Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in versions prior to Brave 1.67.116 that stems from the omission of domain names from the right side instead of the left side of the Brave Shields pop-up window, which can lead to domain name confusion...
