Vulnetix
Try Vulnetix Request Demo
CVE-2025-48980 PUBLISHED CVSS 6.5 MEDIUM

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method.

EPSS 0.07% · 21.2th percentile

Risk Scores

CVSS v3.0
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
0.07%
21.2th percentile

Affected Products

VendorProductVersions
BraveDesktop Browser1.83.10

Timeline

References

Open in Interactive Console →