CVE-2021-22916: Brave

Medium severity, CVSS 5.9. EPSS: 3% chance of exploitation in the next 30 days.

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure.

Affected products

• Brave Brave: from 1.17.0, up to and including 1.26.60

Published 2021-07-12. Last modified 2026-06-17.