Approved changes feed: RSS · Atom

cpe:2.3:a:brave:brave-browser:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBrave (b3516991-2714-56a1-be63-9c87fa6b4495)
ProductBrave Browser (440839c8-e6e6-5f21-a2ce-39f384762588)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21323 vulnerable 2026-06-08 05:29:11.615520 Regression in DNS leakage from Tor windows
MEDIUM (4.3)
Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor windows to their DNS provider. (DNS requests that were not initiated by CNAME adblocking would go through Tor as expected.) This is fixed in Brave version 1.20.108
Published: 2021-02-23T22:45:19.000Z
Updated: 2024-08-03T18:09:15.370Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.