7.5

CVE-2016-10718

Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Brave ≫ Brave Browser Version < 0.13.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 12.89% 0.958
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://github.com/brave/browser-laptop/issues/5006
Third Party Advisory
https://github.com/brave/browser-laptop/issues/5007
Third Party Advisory
https://hackerone.com/reports/176197
Third Party Advisory
https://www.exploit-db.com/exploits/44475/
Third Party Advisory
VDB Entry