CVE-2021-22917: Brave Browser

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled.

Affected products

• Brave Browser: after 1.17, before 1.20 (fixed in 1.20)

Published 2021-07-12. Last modified 2026-06-17.