Brave — Vulnerabilities & Security Advisories 10

Brave is a privacy-focused web browser that blocks ads and trackers by default, with its core use case centered on user privacy and security. Historically, Brave has faced vulnerabilities across multiple classes, including remote code execution (RCE), cross-site scripting (XSS), privilege escalation, and sandbox bypasses. The browser has addressed approximately 10 CVEs to date, with notable incidents including a 2020 RCE vulnerability in its update mechanism and a 2021 XSS flaw in its rewards system. Brave maintains a security-focused development approach, though its aggressive blocking features have occasionally introduced compatibility issues and potential bypass vectors.