CVE-2025-48980 in Desktop Browserinformación

Resumen

por MITRE • 2025-10-31

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsable

Hackerone

Reservar

2025-05-29

Divulgación

2025-10-31

Moderación

aceptado

Artículo

VDB-330656

CPE

listo

EPSS

0.00049

KEV

no

Actividades

muy bajo

Fuentes

Do you know our Splunk app?

Download it now for free!