What’s Vulnerable › Vulnerabilities
CVE-2021-22916
- Severity: medium (CVSS 5.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-07-12 · updated 2026-06-17
- Weakness: CWE-200
Description
In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure.
Affected products
- https://github.com/brave/brave-core: from 1.17.0 through 1.26.60
References
Get alerted when CVE-2021-22916 or the next vulnerability affects your stack