Skip to content

Brave vulnerabilities

Products

Newest

brave WordPress Brave plugin <= 0.8.8 - Content Injection vulnerability CVE-2026-48202 5.3 MediumOctober 29, 2026
brave Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter CVE-2026-81571 4.8 MediumSeptember 2, 2026
amplebyte pvt limited brave conversion engine (pro), brave conversion engine (pro) +1 more WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-32476 7.1 HighAugust 24, 2026
brave Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview CVE-2026-77116 4.3 MediumAugust 23, 2026
brave Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters CVE-2026-77115 7.1 HighAugust 23, 2026
brave WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability CVE-2025-68508 5.3 MediumDecember 24, 2025
brave desktop browser In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the ... CVE-2025-48980 6.5 MediumOctober 30, 2025
brave conversion engine (pro) Brave Conversion Engine (PRO) <= 0.7.7 - Authentication Bypass to Administrator CVE-2025-7710 9.8 CriticalAugust 2, 2025
brave desktop browser On most desktop platforms, Brave Browser versions 1.70.x-1.73.x included a feature to show a site... CVE-2025-23086 6.1 MediumJanuary 21, 2025
brave android browser In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right... CVE-2024-37406 7.5 HighSeptember 18, 2024
brave popup builder, getbrave brave +1 more WordPress Brave plugin <= 0.7.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-43337 Fix available 4.3 MediumAugust 26, 2024
brave, brave popup builder +1 more WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability CVE-2024-35655 Fix available 5.9 MediumJune 4, 2024
brave popup builder WordPress Brave plugin <= 0.6.5 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-30453 Fix available 5.4 MediumMarch 29, 2024
brave – create popup, optins, lead generation, survey, sticky elements & interactive content, getbrave brave +1 more WordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51534 5.9 MediumFebruary 1, 2024
brave browser Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect... CVE-2023-52263 6.1 MediumDecember 30, 2023
brave browser, brave software browser android +1 more An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in... CVE-2023-28364 6.1 MediumJune 30, 2023
brave An omission of security-relevant information vulnerability exists in Brave desktop prior to... CVE-2023-28360 4.3 MediumMay 11, 2023
brave adblock-lists Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists... CVE-2023-22798 6.1 MediumFebruary 9, 2023
brave Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private... CVE-2022-47934 6.5 MediumDecember 24, 2022
brave Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted... CVE-2022-47933 6.5 MediumDecember 24, 2022
brave Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted... CVE-2022-47932 6.5 MediumDecember 24, 2022
brave Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in... CVE-2022-30334 5.3 MediumMay 7, 2022
brave In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying... CVE-2021-45884 7.5 HighDecember 27, 2021
brave An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged... CVE-2021-22929 Fix available 6.1 MediumAugust 31, 2021
brave browser Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by... CVE-2021-22917 6.5 MediumJuly 12, 2021
brave In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy... CVE-2021-22916 5.9 MediumJuly 12, 2021
brave, brave brave-browser +1 more Regression in DNS leakage from Tor windows CVE-2021-21323 4.3 MediumFebruary 23, 2021
brave The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1... CVE-2020-8276 5.5 MediumNovember 9, 2020
brave Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown... CVE-2018-1000815 4.3 MediumDecember 20, 2018
brave A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). This vulnerability... CVE-2018-10799 6.5 MediumMay 7, 2018
brave A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). The vulnerability is... CVE-2018-10798 6.5 MediumMay 7, 2018
brave browser Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource... CVE-2017-18256 Public exploit 6.5 MediumApril 4, 2018
brave browser Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a... CVE-2016-10718 Public exploit EPSS 12.2% 7.5 HighApril 4, 2018
brave browser Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect... CVE-2017-1000461 4.7 MediumJanuary 3, 2018
brave ** DISPUTED ** Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is... CVE-2017-8459 Disputed 6.5 MediumMay 3, 2017
brave Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com... CVE-2017-8458 6.5 MediumMay 3, 2017
brave browser Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full... CVE-2016-9473 4.7 MediumMarch 28, 2017