CVE-2021-22917

—

CVSS 3.1

6.5 medium

EPSS

1%p67

Published

Jul 12, 2021 (Jul 12, 2021)

Modified

Jun 17, 2026

Description

Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled.

Vendors: brave
Products: browser
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.