PT-2023-21671 · Brave · Brave

Name of the Vulnerable Software and Affected Versions: Brave desktop versions prior to 1.48.171 Description: An omission of security-relevant information issue exists when a user saves a file, as there is no download safety check dialog presented to the user. Recommendations: For versions prior t...

Brave Android 1.51.114 Security Fixes

Fixed Brave Wallet binding issue as reported on HackerOne by nick0ve. Upgraded Chromium to 113.0.5672.92 — refer to Google Chrome advisories for inherited CVEs...

Brave Software: UAF on JSEthereumProvider

A UAF Use After Free vulnerability was discovered in the renderer implementation of the Ethereum wallet. This vulnerability allowed an attacker to trigger a crash in the renderer process and potentially execute arbitrary code...

Brave Android 1.51.110 Security Fixes

Prevent blind cross chain signing as reported on HackerOne by julianor. Upgraded Chromium to 113.0.5672.77 — refer to Google Chrome advisories for inherited CVEs...

Google Releases Urgent Chrome Update to Fix Actively Exploited Zero-Day Vulnerability

Google on Friday released out-of-band updates to resolve an actively exploited zero-day flaw in its Chrome web browser, making it the first such bug to be addressed since the start of the year. Tracked as CVE-2023-2033, the high-severity vulnerability has been described as a type confusion issue ...

Rilide Malware – New Crypto Stealer Hits Chromium-Based Browsers

By Deeba Ahmed The Chromium-based browsers include Google Chrome, Microsoft Edge, Brave, Opera, Vivaldi, and several others. This is a post from HackRead.com Read the original post: Rilide Malware - New Crypto Stealer Hits Chromium-Based Browsers...

Brave Android 1.49.122 Security Fixes

Restricted QR scanner to only open HTTP/HTTPS URL schemas rather than allowing any valid URL schema to be opened. Upgraded Chromium to 111.0.5563.64 — refer to Google Chrome advisories for inherited CVEs...

Brave Software: UXss on brave browser via scan QR Code

A UXss vulnerability was found in Brave browser on Android 13, allowing an attacker to execute Xss on all open domains by scanning a QR code containing a malicious URL. The vulnerability could potentially allow attackers to steal victim's cookies and affect various websites...

SUSE CVE-2021-22929

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log...

CVE-2023-22798

Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists removed redirect interceptors on some websites like Facebook in which the redirect interceptor may have been there for security purposes. This could potentially cause open redirects on these websites...

Open redirect

Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists removed redirect interceptors on some websites like Facebook in which the redirect interceptor may have been there for security purposes. This could potentially cause open redirects on these websites...

CVE-2023-22798

Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists removed redirect interceptors on some websites like Facebook in which the redirect interceptor may have been there for security purposes. This could potentially cause open redirects on these websites...

CVE-2023-22798

CVE-2023-22798 relates to Brave's adblock-lists redirect interceptors. Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, Brave removed redirect interceptors on some sites (notably Facebook), via a feature known as “debouncing.” This removal could enable open redirects on those websites if...

CVE-2023-22798

Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists removed redirect interceptors on some websites like Facebook in which the redirect interceptor may have been there for security purposes. This could potentially cause open redirects on these websites...

adblock-lists 输入验证错误漏洞

adblock-lists are block lists used by AdBlock. Brave adblock-lists has a security vulnerability that stems from the presence of open redirects...

CVE-2023-22798: URL Redirection to Untrusted Site

Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists removed redirect interceptors on some websites like Facebook in which the redirect interceptor may have been there for security purposes. This could potentially cause open redirects on these websites...

Brave Android 1.48.160 Security Fixes

Added the ability to delete a Brave Sync chain. - Added ability to enable Safe Browsing via brave://flags. - Fixed EIP712Domain data not being displayed in Brave Wallet when signing messages as reported on HackerOne by julianor. Upgraded Chromium to 110.0.5481.77 — refer to Google Chrome...

Brave Software: download file type warning on Windows does not appear if "ask where to save file before downloading" setting is enabled

Vulnerability description not provided...

Brave Software: Brave News feeds can open arbitrary chrome: URLs

An issue was discovered in Brave Browser versions 1.46.144 and earlier. The Brave News feeds feature can be exploited to open arbitrary chrome: URLs, bypassing the Same Origin Policy SOP and potentially granting access to privileged URLs. An attacker could use this vulnerability to gain...

Brave Software: UI spoofing by showing sms:/tel: dialog on another website

A vulnerability was discovered in Brave for iOS version 1.45.2 that allowed for UI spoofing by showing an sms:/tel: dialog on another website without displaying the caller origin, potentially leading to user confusion and deception...