CVE-2021-45884

In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fallback are enabled, additional DNS requests are issued outside of the proxying extension using the system's DNS settings, resulting in information disclosure. NOTE: this issue exists because of an incomplete fix for CVE-2021-21323 and CVE-2021-22916.

• CWE-200

• https://github.com/brave/brave-browser/issues/19070Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/brave/brave-browser/issues/20079Issue Tracking, Release Notes, Third Party Advisory
• https://github.com/brave/brave-core/pull/10742Patch, Third Party Advisory
• https://hackerone.com/reports/1377864Permissions Required
• https://github.com/brave/brave-browser/issues/19070Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/brave/brave-browser/issues/20079Issue Tracking, Release Notes, Third Party Advisory
• https://github.com/brave/brave-core/pull/10742Patch, Third Party Advisory
• https://hackerone.com/reports/1377864Permissions Required

Published

Dec 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45865A File Upload vulnerability exists in Sourcecodester Student…9.8
• CVE-2021-45866A Stored Cross Site Scripting (XSS) vulnerability exists in …5.4
• CVE-2021-45868In the Linux kernel before 5.15.3, fs/quota/quota_tree.c doe…5.5
• CVE-2021-45876Multiple versions of GARO Wallbox GLB/GTB/GTC are affected b…9.8
• CVE-2021-45877Multiple versions of GARO Wallbox GLB/GTB/GTC are affected b…9.8
• CVE-2021-45878Multiple versions of GARO Wallbox GLB/GTB/GTC are affected b…9.1
• CVE-2021-45885An issue was discovered in Stormshield Network Security (SNS…7.5
• CVE-2021-45886An issue was discovered in PONTON X/P Messenger before 3.11.…8.8
• CVE-2021-45887An issue was discovered in PONTON X/P Messenger before 3.11.…9.8
• CVE-2021-45888An issue was discovered in PONTON X/P Messenger before 3.11.…4.8
• CVE-2021-45889An issue was discovered in PONTON X/P Messenger before 3.11.…5.4
• CVE-2021-45890basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allow…9.8