CVE-2021-45884

    Dashboard / Vulnerabilities / CVE-2021-45884

    CVE-2021-45884

    Published: 27 Dec 2021Last Modified: 10 Apr 2026

    Summary:

    Details: In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fallback are enabled, additional DNS requests are issued outside of the proxying extension using the system's DNS settings, resulting in information disclosure. NOTE: this issue exists because of an incomplete fix for CVE-2021-21323 and CVE-2021-22916.

    References: https://github.com/brave/brave-browser/issues/20079, https://hackerone.com/reports/1377864, https://github.com/brave/brave-core/pull/10742, https://github.com/brave/brave-browser/issues/19070

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- e4d2881a3aec8fa6f5b3f454bddb602e682ed75b
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-45884 | CVE-DB