CVE-2021-22917

6.5 mediumEPSS 1.2%

Medium (6.5) in brave browser. EPSS 1.2% chance of exploitation in the next 30 days.

Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2021-07-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

brave:browser

References

https://hackerone.com/reports/1077022
https://hackerone.com/reports/1077022

Check your stack JSON