high7.5Public exploit code
CVE-2016-10718
Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Brave Browser < 0.13.0 - 'window.close(self)' Denial of Service2018-04-17 · dos · windows
Impact
Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Brave | Brave Browser | before 0.13.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/brave/browser-laptop/issues/5006
- https://github.com/brave/browser-laptop/issues/5007
- https://hackerone.com/reports/176197
- https://www.exploit-db.com/exploits/44475/
- https://github.com/brave/browser-laptop/issues/5006
- https://github.com/brave/browser-laptop/issues/5007
- https://hackerone.com/reports/176197
- https://www.exploit-db.com/exploits/44475/