1. Home
  2. CVE Database
  3. CVE-2021-22916
MEDIUM · 5.9

CVE-2021-22916

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS set...

Vulnerability Description

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
BraveBrave>= 1.17.0, <= 1.26.60

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2021-22916?

CVE-2021-22916 is a vulnerability with a CVSS score of 5.9 (MEDIUM). In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS set...

How severe is CVE-2021-22916?

CVE-2021-22916 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-22916?

Check the references section above for vendor advisories and patch information. Affected products include: Brave Brave.