brave/browser-laptop

brave/browser-laptop

Releases623

Frequency1 day 21 hours

Last Release about 7 years ago

Stars7.92K

[DEPRECATED] Please see https://github.com/brave/brave-browser for the current version of Brave

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-1000815 ↗	Dec 20, 2018Thursday, 20 December 2018, 15:29	—	4.3 MEDIUM
Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript() in content_settings_observer.cc that can result in Websites can run inline JavaScript even if script is blocked, making attackers easier to track users. This attack appear to be exploitable via the victim must visit a specially crafted website. This vulnerability appears to have been fixed in 0.25.2.
CVE-2016-10718 ↗	Apr 4, 2018Wednesday, 4 April 2018, 02:29	—	5 MEDIUM
Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.
CVE-2017-1000461 ↗	Jan 3, 2018Wednesday, 3 January 2018, 20:29	—	4.3 MEDIUM
Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality (that the browser intends to block).
CVE-2017-8458 ↗	May 3, 2017Wednesday, 3 May 2017, 14:59	—	4.3 MEDIUM
Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://[email protected]/ is displayed without a clear UI indication that it is not a resource on the safe.example.com web site.