CVE-2022-47934

MEDIUM 6.5CVE-2022-47934 · Published 24/12/2022 · updated 17/06/2026

In short

CVE-2022-47934 is a MEDIUM (CVSS 6.5) vulnerability affecting brave (brave).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.7% of all vulnerabilities.
Fix: update to 1.43.88 or later.

Package	Affected versions	Patched versions
brave brave	`< 1.43.88`	`1.43.88`

Description

Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is caused by an incomplete fix for CVE-2022-47932 and CVE-2022-47934.

References

brave/brave-browser · Exploit
brave/brave-browser · Issue Tracking
brave/brave-core commit 82d8e39 · Patch
brave/brave-core#14313 · Patch
hackerone.com/reports/1646204 · Permissions Required

More vulnerabilities in brave

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

brave

< 1.43.88

1.43.88

More vulnerabilities in brave

See all →