In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure.
{
"cpe": "cpe:2.3:a:brave:brave:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "1.17.0"
},
{
"last_affected": "1.26.60"
}
],
"source": "CPE_RANGE"
}{
"cpe": "cpe:2.3:a:brave:brave:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "1.17.0"
},
{
"last_affected": "1.26.60"
}
],
"source": "CPE_RANGE"
}