Brave Android 1.61.100 Security Fixes

Fixed crash when incorrectly handling reward navigation redirects as reported on HackerOne by 0xc4gr1. Upgraded Chromium to 120.0.6099.62 — refer to Google Chrome advisories for inherited CVEs...

Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability

Google has rolled out security updates to fix seven security issues in its Chrome browser, including a zero-day that has come under active exploitation in the wild. Tracked as CVE-2023-6345, the high-severity vulnerability has been described as an integer overflow bug in Skia, an open source 2D...

Private and Secure Web Search Engines: DuckDuckGo, Brave, Kagi, Startpage

What you look for online is up to you—just make sure no one else is taking a peek...

The vulnerability of the Adblock-lists component in the Brave Browser allows a hacker to redirect users to any desired URL address.

The vulnerability of the Adblock-lists component in the Brave Browser involves redirecting URLs to unreliable websites. Exploiting this vulnerability could allow a malicious actor to redirect users to arbitrary URL addresses...

Brave Android 1.59.117 Security Fixes

Updated which origins and URLs trigger debouncing and request-OTR protections as reported on HackerOne by nishimunea. - Fixed crash when loading brave://optimization-guide-internals as reported on HackerOne by jaguilera. Upgraded Chromium to 118.0.5993.70 — refer to Google Chrome advisories for...

Brave Android 1.58.125 Security Fixes

Fixed Brave Wallet pop-up hiding the full screen toast as reported on HackerOne by shadow2639. Upgraded Chromium to 117.0.5938.62 — refer to Google Chrome advisories for inherited CVEs...

A week in security (July 3 - 9)

Last week on Malwarebytes Labs: How kids pay the price for ransomware attacks on education Solar monitoring systems exposed: Secure your devices Warning issued over vulnerability in cardiac device monitoring software Update Android now! Google patches three actively exploited zero-days Malicious ...

Brave browser will prevent websites from port scanning visitors

If you use Brave browser, then youre shortly going to find you have a new string added to your security bow. Websites performing port scanning will now be automatically blocked beginning with version 1.54 of the browsing tool. Port scanning, I hear you cry? Yes indeed. You may well not have even...

CVE-2023-28364

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

Open redirect

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

Brave Browser Android 输入验证错误漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability previously existed in Brave Browser Android version 1.52.117, which originated from an open redirection vulnerability that could be triggered when scanning a QR code QR code...

CVE-2023-28364

CVE-2023-28364 describes an Open Redirect in Brave Browser for Android prior to 1.52.117, where the built-in QR scanner automatically navigated to scanned URLs without showing them first. The vulnerability could lead users to malicious sites via QR-scanned redirects. Evidence across multiple sour...

CVE-2023-28364

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

CVE-2023-28364

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL...

PT-2023-21674 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser Android versions prior to 1.52.117 Description: An Open Redirect issue exists where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now, the user must...

Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability - Update Now!

Google on Monday released security updates to patch a high-severity flaw in its Chrome web browser that it said is being actively exploited in the wild. Tracked as CVE-2023-3079, the vulnerability has been described as a type confusion bug in the V8 JavaScript engine. Clement Lecigne of Google's...

Brave Android 1.52.117 Security Fixes

Fixed URLs automatically being resolved when scanned from QR code as reported on HackerOne by rolandhack. Upgraded Chromium to 114.0.5735.90 — refer to Google Chrome advisories for inherited CVEs...

CVE-2023-28360

An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file there was no download safety check dialog presented to the user...

Design/Logic Flaw

An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file there was no download safety check dialog presented to the user...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in versions prior to Brave 1.48.171, which stems from a download security check dialog that is not displayed to the user when saving a file...