CVE-2025-48980 in Desktop Browserinfo

Zusammenfassung

von MITRE • 31.10.2025

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Zuständig

Hackerone

Reservieren

29.05.2025

Veröffentlichung

31.10.2025

Moderieren

akzeptiert

Eintrag

VDB-330656

CPE

bereit

EPSS

0.00049

KEV

nein

Aktivitäten

very low

Quellen

Interested in the pricing of exploits?

See the underground prices here!