Brave CVE-2018-10798

In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fa

Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displ

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a c

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that referen

Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mention

A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). Rated medium severity (CVSS 6.5), this vuln

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android

Prior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists removed redirect interc

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that i

The implementation of Brave Desktop's privacy-preserving analytics system (P3A) between 1.1 and 1.18.35 logged the times

Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. Rat

Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers.