Vulnerability Details CVE-2021-21323
Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor windows to their DNS provider. (DNS requests that were not initiated by CNAME adblocking would go through Tor as expected.) This is fixed in Brave version 1.20.108
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.6%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.3
Products affected by CVE-2021-21323
-
cpe:2.3:a:brave:brave:1.17.73
-
cpe:2.3:a:brave:brave:1.18.1
-
cpe:2.3:a:brave:brave:1.18.10
-
cpe:2.3:a:brave:brave:1.18.11
-
cpe:2.3:a:brave:brave:1.18.12
-
cpe:2.3:a:brave:brave:1.18.13
-
cpe:2.3:a:brave:brave:1.18.14
-
cpe:2.3:a:brave:brave:1.18.15
-
cpe:2.3:a:brave:brave:1.18.16
-
cpe:2.3:a:brave:brave:1.18.17
-
cpe:2.3:a:brave:brave:1.18.18
-
cpe:2.3:a:brave:brave:1.18.19
-
cpe:2.3:a:brave:brave:1.18.2
-
cpe:2.3:a:brave:brave:1.18.20
-
cpe:2.3:a:brave:brave:1.18.21
-
cpe:2.3:a:brave:brave:1.18.22
-
cpe:2.3:a:brave:brave:1.18.23
-
cpe:2.3:a:brave:brave:1.18.24
-
cpe:2.3:a:brave:brave:1.18.25
-
cpe:2.3:a:brave:brave:1.18.26
-
cpe:2.3:a:brave:brave:1.18.27
-
cpe:2.3:a:brave:brave:1.18.28
-
cpe:2.3:a:brave:brave:1.18.29
-
cpe:2.3:a:brave:brave:1.18.3
-
cpe:2.3:a:brave:brave:1.18.30
-
cpe:2.3:a:brave:brave:1.18.31
-
cpe:2.3:a:brave:brave:1.18.32
-
cpe:2.3:a:brave:brave:1.18.33
-
cpe:2.3:a:brave:brave:1.18.34
-
cpe:2.3:a:brave:brave:1.18.35
-
cpe:2.3:a:brave:brave:1.18.36
-
cpe:2.3:a:brave:brave:1.18.37
-
cpe:2.3:a:brave:brave:1.18.38
-
cpe:2.3:a:brave:brave:1.18.39
-
cpe:2.3:a:brave:brave:1.18.4
-
cpe:2.3:a:brave:brave:1.18.40
-
cpe:2.3:a:brave:brave:1.18.41
-
cpe:2.3:a:brave:brave:1.18.42
-
cpe:2.3:a:brave:brave:1.18.43
-
cpe:2.3:a:brave:brave:1.18.44
-
cpe:2.3:a:brave:brave:1.18.45
-
cpe:2.3:a:brave:brave:1.18.46
-
cpe:2.3:a:brave:brave:1.18.47
-
cpe:2.3:a:brave:brave:1.18.48
-
cpe:2.3:a:brave:brave:1.18.49
-
cpe:2.3:a:brave:brave:1.18.5
-
cpe:2.3:a:brave:brave:1.18.50
-
cpe:2.3:a:brave:brave:1.18.51
-
cpe:2.3:a:brave:brave:1.18.52
-
cpe:2.3:a:brave:brave:1.18.53
-
cpe:2.3:a:brave:brave:1.18.54
-
cpe:2.3:a:brave:brave:1.18.55
-
cpe:2.3:a:brave:brave:1.18.56
-
cpe:2.3:a:brave:brave:1.18.57
-
cpe:2.3:a:brave:brave:1.18.58
-
cpe:2.3:a:brave:brave:1.18.59
-
cpe:2.3:a:brave:brave:1.18.6
-
cpe:2.3:a:brave:brave:1.18.60
-
cpe:2.3:a:brave:brave:1.18.61
-
cpe:2.3:a:brave:brave:1.18.62
-
cpe:2.3:a:brave:brave:1.18.63
-
cpe:2.3:a:brave:brave:1.18.64
-
cpe:2.3:a:brave:brave:1.18.65
-
cpe:2.3:a:brave:brave:1.18.66
-
cpe:2.3:a:brave:brave:1.18.67
-
cpe:2.3:a:brave:brave:1.18.68
-
cpe:2.3:a:brave:brave:1.18.69
-
cpe:2.3:a:brave:brave:1.18.7
-
cpe:2.3:a:brave:brave:1.18.70
-
cpe:2.3:a:brave:brave:1.18.71
-
cpe:2.3:a:brave:brave:1.18.72
-
cpe:2.3:a:brave:brave:1.18.73
-
cpe:2.3:a:brave:brave:1.18.74
-
cpe:2.3:a:brave:brave:1.18.75
-
cpe:2.3:a:brave:brave:1.18.76
-
cpe:2.3:a:brave:brave:1.18.77
-
cpe:2.3:a:brave:brave:1.18.78
-
cpe:2.3:a:brave:brave:1.18.8
-
cpe:2.3:a:brave:brave:1.18.9
-
cpe:2.3:a:brave:brave:1.19.1
-
cpe:2.3:a:brave:brave:1.19.10
-
cpe:2.3:a:brave:brave:1.19.11
-
cpe:2.3:a:brave:brave:1.19.12
-
cpe:2.3:a:brave:brave:1.19.13
-
cpe:2.3:a:brave:brave:1.19.14
-
cpe:2.3:a:brave:brave:1.19.15
-
cpe:2.3:a:brave:brave:1.19.16
-
cpe:2.3:a:brave:brave:1.19.17
-
cpe:2.3:a:brave:brave:1.19.18
-
cpe:2.3:a:brave:brave:1.19.19
-
cpe:2.3:a:brave:brave:1.19.2
-
cpe:2.3:a:brave:brave:1.19.20
-
cpe:2.3:a:brave:brave:1.19.21
-
cpe:2.3:a:brave:brave:1.19.22
-
cpe:2.3:a:brave:brave:1.19.23
-
cpe:2.3:a:brave:brave:1.19.24
-
cpe:2.3:a:brave:brave:1.19.25
-
cpe:2.3:a:brave:brave:1.19.26
-
cpe:2.3:a:brave:brave:1.19.27
-
cpe:2.3:a:brave:brave:1.19.28
-
cpe:2.3:a:brave:brave:1.19.29
-
cpe:2.3:a:brave:brave:1.19.3
-
cpe:2.3:a:brave:brave:1.19.30
-
cpe:2.3:a:brave:brave:1.19.31
-
cpe:2.3:a:brave:brave:1.19.32
-
cpe:2.3:a:brave:brave:1.19.33
-
cpe:2.3:a:brave:brave:1.19.34
-
cpe:2.3:a:brave:brave:1.19.35
-
cpe:2.3:a:brave:brave:1.19.36
-
cpe:2.3:a:brave:brave:1.19.37
-
cpe:2.3:a:brave:brave:1.19.38
-
cpe:2.3:a:brave:brave:1.19.39
-
cpe:2.3:a:brave:brave:1.19.4
-
cpe:2.3:a:brave:brave:1.19.40
-
cpe:2.3:a:brave:brave:1.19.41
-
cpe:2.3:a:brave:brave:1.19.42
-
cpe:2.3:a:brave:brave:1.19.43
-
cpe:2.3:a:brave:brave:1.19.44
-
cpe:2.3:a:brave:brave:1.19.45
-
cpe:2.3:a:brave:brave:1.19.46
-
cpe:2.3:a:brave:brave:1.19.47
-
cpe:2.3:a:brave:brave:1.19.48
-
cpe:2.3:a:brave:brave:1.19.49
-
cpe:2.3:a:brave:brave:1.19.5
-
cpe:2.3:a:brave:brave:1.19.50
-
cpe:2.3:a:brave:brave:1.19.51
-
cpe:2.3:a:brave:brave:1.19.52
-
cpe:2.3:a:brave:brave:1.19.53
-
cpe:2.3:a:brave:brave:1.19.54
-
cpe:2.3:a:brave:brave:1.19.55
-
cpe:2.3:a:brave:brave:1.19.56
-
cpe:2.3:a:brave:brave:1.19.57
-
cpe:2.3:a:brave:brave:1.19.58
-
cpe:2.3:a:brave:brave:1.19.59
-
cpe:2.3:a:brave:brave:1.19.6
-
cpe:2.3:a:brave:brave:1.19.60
-
cpe:2.3:a:brave:brave:1.19.61
-
cpe:2.3:a:brave:brave:1.19.62
-
cpe:2.3:a:brave:brave:1.19.63
-
cpe:2.3:a:brave:brave:1.19.64
-
cpe:2.3:a:brave:brave:1.19.65
-
cpe:2.3:a:brave:brave:1.19.66
-
cpe:2.3:a:brave:brave:1.19.67
-
cpe:2.3:a:brave:brave:1.19.68
-
cpe:2.3:a:brave:brave:1.19.69
-
cpe:2.3:a:brave:brave:1.19.7
-
cpe:2.3:a:brave:brave:1.19.70
-
cpe:2.3:a:brave:brave:1.19.71
-
cpe:2.3:a:brave:brave:1.19.72
-
cpe:2.3:a:brave:brave:1.19.73
-
cpe:2.3:a:brave:brave:1.19.74
-
cpe:2.3:a:brave:brave:1.19.75
-
cpe:2.3:a:brave:brave:1.19.76
-
cpe:2.3:a:brave:brave:1.19.77
-
cpe:2.3:a:brave:brave:1.19.78
-
cpe:2.3:a:brave:brave:1.19.79
-
cpe:2.3:a:brave:brave:1.19.8
-
cpe:2.3:a:brave:brave:1.19.80
-
cpe:2.3:a:brave:brave:1.19.81
-
cpe:2.3:a:brave:brave:1.19.82
-
cpe:2.3:a:brave:brave:1.19.83
-
cpe:2.3:a:brave:brave:1.19.84
-
cpe:2.3:a:brave:brave:1.19.85
-
cpe:2.3:a:brave:brave:1.19.86
-
cpe:2.3:a:brave:brave:1.19.87
-
cpe:2.3:a:brave:brave:1.19.88
-
cpe:2.3:a:brave:brave:1.19.89
-
cpe:2.3:a:brave:brave:1.19.9
-
cpe:2.3:a:brave:brave:1.19.90
-
cpe:2.3:a:brave:brave:1.19.91
-
cpe:2.3:a:brave:brave:1.19.92
-
cpe:2.3:a:brave:brave:1.19.93
-
cpe:2.3:a:brave:brave:1.20.1
-
cpe:2.3:a:brave:brave:1.20.10
-
cpe:2.3:a:brave:brave:1.20.100
-
cpe:2.3:a:brave:brave:1.20.101
-
cpe:2.3:a:brave:brave:1.20.102
-
cpe:2.3:a:brave:brave:1.20.103
-
cpe:2.3:a:brave:brave:1.20.11
-
cpe:2.3:a:brave:brave:1.20.12
-
cpe:2.3:a:brave:brave:1.20.13
-
cpe:2.3:a:brave:brave:1.20.14
-
cpe:2.3:a:brave:brave:1.20.15
-
cpe:2.3:a:brave:brave:1.20.16
-
cpe:2.3:a:brave:brave:1.20.17
-
cpe:2.3:a:brave:brave:1.20.18
-
cpe:2.3:a:brave:brave:1.20.19
-
cpe:2.3:a:brave:brave:1.20.20
-
cpe:2.3:a:brave:brave:1.20.21
-
cpe:2.3:a:brave:brave:1.20.22
-
cpe:2.3:a:brave:brave:1.20.23
-
cpe:2.3:a:brave:brave:1.20.24
-
cpe:2.3:a:brave:brave:1.20.25
-
cpe:2.3:a:brave:brave:1.20.26
-
cpe:2.3:a:brave:brave:1.20.27
-
cpe:2.3:a:brave:brave:1.20.28
-
cpe:2.3:a:brave:brave:1.20.29
-
cpe:2.3:a:brave:brave:1.20.3
-
cpe:2.3:a:brave:brave:1.20.30
-
cpe:2.3:a:brave:brave:1.20.31
-
cpe:2.3:a:brave:brave:1.20.32
-
cpe:2.3:a:brave:brave:1.20.33
-
cpe:2.3:a:brave:brave:1.20.34
-
cpe:2.3:a:brave:brave:1.20.35
-
cpe:2.3:a:brave:brave:1.20.36
-
cpe:2.3:a:brave:brave:1.20.37
-
cpe:2.3:a:brave:brave:1.20.38
-
cpe:2.3:a:brave:brave:1.20.39
-
cpe:2.3:a:brave:brave:1.20.4
-
cpe:2.3:a:brave:brave:1.20.40
-
cpe:2.3:a:brave:brave:1.20.41
-
cpe:2.3:a:brave:brave:1.20.42
-
cpe:2.3:a:brave:brave:1.20.43
-
cpe:2.3:a:brave:brave:1.20.44
-
cpe:2.3:a:brave:brave:1.20.45
-
cpe:2.3:a:brave:brave:1.20.46
-
cpe:2.3:a:brave:brave:1.20.47
-
cpe:2.3:a:brave:brave:1.20.48
-
cpe:2.3:a:brave:brave:1.20.49
-
cpe:2.3:a:brave:brave:1.20.5
-
cpe:2.3:a:brave:brave:1.20.50
-
cpe:2.3:a:brave:brave:1.20.51
-
cpe:2.3:a:brave:brave:1.20.52
-
cpe:2.3:a:brave:brave:1.20.53
-
cpe:2.3:a:brave:brave:1.20.54
-
cpe:2.3:a:brave:brave:1.20.55
-
cpe:2.3:a:brave:brave:1.20.56
-
cpe:2.3:a:brave:brave:1.20.57
-
cpe:2.3:a:brave:brave:1.20.58
-
cpe:2.3:a:brave:brave:1.20.59
-
cpe:2.3:a:brave:brave:1.20.6
-
cpe:2.3:a:brave:brave:1.20.60
-
cpe:2.3:a:brave:brave:1.20.61
-
cpe:2.3:a:brave:brave:1.20.62
-
cpe:2.3:a:brave:brave:1.20.63
-
cpe:2.3:a:brave:brave:1.20.64
-
cpe:2.3:a:brave:brave:1.20.65
-
cpe:2.3:a:brave:brave:1.20.66
-
cpe:2.3:a:brave:brave:1.20.67
-
cpe:2.3:a:brave:brave:1.20.68
-
cpe:2.3:a:brave:brave:1.20.69
-
cpe:2.3:a:brave:brave:1.20.7
-
cpe:2.3:a:brave:brave:1.20.70
-
cpe:2.3:a:brave:brave:1.20.71
-
cpe:2.3:a:brave:brave:1.20.72
-
cpe:2.3:a:brave:brave:1.20.73
-
cpe:2.3:a:brave:brave:1.20.74
-
cpe:2.3:a:brave:brave:1.20.75
-
cpe:2.3:a:brave:brave:1.20.76
-
cpe:2.3:a:brave:brave:1.20.77
-
cpe:2.3:a:brave:brave:1.20.78
-
cpe:2.3:a:brave:brave:1.20.79
-
cpe:2.3:a:brave:brave:1.20.8
-
cpe:2.3:a:brave:brave:1.20.80
-
cpe:2.3:a:brave:brave:1.20.81
-
cpe:2.3:a:brave:brave:1.20.82
-
cpe:2.3:a:brave:brave:1.20.83
-
cpe:2.3:a:brave:brave:1.20.84
-
cpe:2.3:a:brave:brave:1.20.85
-
cpe:2.3:a:brave:brave:1.20.86
-
cpe:2.3:a:brave:brave:1.20.87
-
cpe:2.3:a:brave:brave:1.20.88
-
cpe:2.3:a:brave:brave:1.20.89
-
cpe:2.3:a:brave:brave:1.20.9
-
cpe:2.3:a:brave:brave:1.20.90
-
cpe:2.3:a:brave:brave:1.20.91
-
cpe:2.3:a:brave:brave:1.20.92
-
cpe:2.3:a:brave:brave:1.20.93
-
cpe:2.3:a:brave:brave:1.20.94
-
cpe:2.3:a:brave:brave:1.20.95
-
cpe:2.3:a:brave:brave:1.20.96
-
cpe:2.3:a:brave:brave:1.20.97
-
cpe:2.3:a:brave:brave:1.20.98
-
cpe:2.3:a:brave:brave:1.20.99