CVE-2016-9473

MEDIUM

Brave Browser iOS < 1.2.18 and Android <= 1.9.56 - Full Address Bar Spoofing

Title source: llm
STIX 2.1

Description

Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names.

References (4)

Core 4
Core References
Broken Link x_refsource_misc
https://github.com/brave/browser-ios/pull/504
Exploit, Third Party Advisory x_refsource_misc
https://cxsecurity.com/issue/WLB-2017010042
Exploit, Vendor Advisory x_refsource_misc
https://hackerone.com/reports/175958
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97155

Scores

CVSS v3 4.7
EPSS 0.0193
EPSS Percentile 77.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Details

CWE
CWE-451 CWE-79
Status published
Products (3)
brave/browser < 1.2.18
brave/browser < 1.9.56
n/a/Brave Software Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier Brave Software Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier
Published Mar 28, 2017
Tracked Since Feb 18, 2026