Full Address Bar Spoofing Vulnerability in Brave Browser
CVE-2016-9473

4.7MEDIUM

What is CVE-2016-9473?

Brave Browser for iOS and Android is susceptible to a Full Address Bar Spoofing issue. This vulnerability allows malicious actors to mislead users by displaying harmful webpages disguised as legitimate domains, potentially compromising user trust and security. It is crucial for users to update to the latest versions to fortify their defenses against such deceptive tactics. This flaw raises significant concerns regarding user safety and the integrity of the browsing experience.

Affected Version(s)

Brave Software Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier Brave Software Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier

References

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.