Back to Database
Status published
Medium
CVE-2017-1000461
Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable...
Vulnerability Description
Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality (that the browser intends to block).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-1000461
Credits & Attribution
No credits recorded in the NVD database.
More from brave
View All →CVE-2022-47934
Brave Browser before 1.43.88 allowed a remote attacker to cause...
Unknown
0
CVE-2022-47933
Brave Browser before 1.42.51 allowed a remote attacker to cause...
Unknown
0
CVE-2022-47932
Brave Browser before 1.43.34 allowed a remote attacker to cause...
Unknown
0
CVE-2022-30334
Brave before 1.34, when a Private Window with Tor Connectivity...
Medium
5.3
CVE-2021-45884
In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based...
High
7.5
Affected Vendor
brave
View all reports →Affected Software
browser
Vulnerable Versions:
0
Timeline
Official Publish:
January 3rd, 2018
Last Modified:
September 17th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.