CVE-2025-48980mediumCWE-565

CVE-2025-48980: medium-severity vulnerability in Brave Desktop Browser

Published · Updated

Follow this CVE+ Monitor Desktop Browser

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.3%
In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Brave · Desktop Browser
Related CVEs — Brave Desktop Browser

In the same product, most dangerous first.

CVE-2025-23086MEDIUMCVE-2025-23086EPSS 0.4%