High severity7.5NVD Advisory· Published Sep 18, 2024· Updated Jun 17, 2026

CVE-2024-37406

Description

In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion.

Affected products

Brave/Brave Coreinferred
Range: <1.67.116
Brave/Brave Androidllm-create
Range: <1.67.116

Patches

Vulnerability mechanics

References

hackerone.com/reports/2501378nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000