VULNERABILITY INTELLIGENCE

CVE-2021-22916

CVSS score5.9 MEDIUM
EPSS probability2.99%
CISA KEVNot currently listed
Published2021-07-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure.

Weakness classification

  • support@hackerone.com: CWE-200
  • nvd@nist.gov: NVD-CWE-Other

Primary references