PT-2022-7098 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser affected versions not specified Description: The issue is related to incorrect memory cleanup or deallocation in the Brave Browser, which can be exploited by a remote attacker using a specially crafted html file to cause a denia...

CVE-2022-47933

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequestIPFSRedirectWork in ipfsredirectnetworkdelegatehelper.cc...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in Brave Browser versions prior to 1.42.51, which originated from a vulnerability that could allow a remote attacker to cause a denial of service via a crafted HTML file that references an IPFS scheme...

PT-2022-28093 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser versions prior to 1.42.51 Description: The issue allows a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This is caused by an uncaught exception in the function...

CVE-2022-47933

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequestIPFSRedirectWork in ipfsredirectnetworkdelegatehelper.cc...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in Brave Browser versions prior to 1.43.88 that could allow a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file containing an ipfs:// or ipns:// URL...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in versions prior to Brave Browser 1.43.34 that originated from a vulnerability that allows remote attackers to cause a denial of service via a crafted HTML file...

PT-2022-28092 · Brave · Brave Browser

Name of the Vulnerable Software and Affected Versions: Brave Browser versions prior to 1.43.34 Description: The issue allows a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is due to an incomplete fix for a previous issue...

CVE-2022-47933

Brave Browser is affected by CVE-2022-47933 where an uncaught exception in ipfs_redirect_network_delegate_helper.cc (ipfs::OnBeforeURLRequest_IPFSRedirectWork()) allows a remote attacker to trigger a denial-of-service via a crafted HTML file referencing the IPFS scheme. Impact is a crash/DoS; exp...

CVE-2022-47934

CVE-2022-47934 affects Brave Browser prior to 1.43.88. A DoS can be triggered in private and guest windows by a crafted HTML file referencing ipfs:// or ipns:// URLs, stemming from an incomplete fix for CVE-2022-47932 and CVE-2022-47934. Affected component is Brave Browser’s HTML handling; root c...

CVE-2022-47934

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is caused by an incomplete fix for CVE-2022-47932 and CVE-2022-47934...

CVE-2022-47932

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933...

CVE-2022-47932

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933...

CVE-2022-47933

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequestIPFSRedirectWork in ipfsredirectnetworkdelegatehelper.cc...

Brave Software: S3 Bucket Takeover : brave-apt

An unclaimed S3 bucket was found on the domain brave.com, which was being used in the installation of brave-browser in Linux distros. An attacker could have taken over the S3 bucket and used it to spread malware or create a fake login page to spoof users. The vulnerability was reported to the...

Google Rolls Out New Chrome Browser Update to Patch Yet Another Zero-Day Vulnerability

Search giant Google on Friday released an out-of-band security update to fix a new actively exploited zero-day flaw in its Chrome web browser. The high-severity flaw, tracked as CVE-2022-4262, concerns a type confusion bug in the V8 JavaScript engine. Clement Lecigne of Google's Threat Analysis...

Brave Android 1.46.133 Security Fixes

Fixed "Dark Mode" detection not being blocked when fingerprinting protection is set as strict. Upgraded Chromium to 108.0.5359.71 — refer to Google Chrome advisories for inherited CVEs...

This Malware Installs Malicious Browser Extensions to Steal Users' Passwords and Cryptos

A malicious extension for Chromium-based web browsers has been observed to be distributed via a long-standing Windows information stealer called ViperSoftX. Czech-based cybersecurity company dubbed the rogue browser add-on VenomSoftX owing to its standalone features that enable it to access websi...

Brave Android 1.45.127 Security Fixes

Fixed misleading signing request message in Brave Wallet...

Brave Android 1.45.113 Security Fixes

Added additional password protection for Brave Wallet show private key. Upgraded Chromium to 107.0.5304.62 — refer to Google Chrome advisories for inherited CVEs...