CVE-2021-22916

Description

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extensions proxy settings, resulting in possible information disclosure.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.223

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-22916 are affected in Brave (x64) 1.26.60	Windows
Vulnerabilities CVE-2021-22916 are affected in Brave (User Based) 1.26.60	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234