CVE-2025-48980

NONE EPSS 21.4%

Published Oct 31, 20258mo ago · Modified Jun 17, 20262w ago

Published Oct 31, 2025 8mo ago

Last Modified Jun 17, 2026 2w ago

Description

In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect the SameSite cookie attribute. Therefore SameSite=Strict cookies would be sent on a cross-site navigation using this method.

Threat Intelligence

EPSS Exploit Probability

21.4% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-565

References 1

hackerone.com https://hackerone.com/reports/3253725

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.