What’s Vulnerable › Vulnerabilities
CVE-2021-22917
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-07-12 · updated 2026-06-17
- Weakness: CWE-200
Description
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled.
Affected products
- Brave Software Brave Browser Android: from 1.17 (excl.) before 1.20 — fixed in 1.20
How to fix
Upgrade to a fixed version: Brave Software Brave Browser Android 1.20. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2021-22917 or the next vulnerability affects your stack