PatchTheCVECVE-2017-1000461: Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control iss
CVE-2017-1000461 is a medium-severity flaw (CVSS 4.7) affecting browser. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality (that the browser intends to block).
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 4.7 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 1.0% (top 37%) |
| CISA exploited list | No |
| Weakness | CWE-732 |
| Published | 2018-01-03 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-1000461?
browser: upgrade to newer than 0.19.73. Exact commands for each OS are on this page.
Is CVE-2017-1000461 being exploited?
CVE-2017-1000461 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-1000461 affect?
CVE-2017-1000461 affects browser. Severity is medium (CVSS 4.7). Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associa
How urgent is CVE-2017-1000461?
Priority 32/100. No elevated risk signals yet.
Related CVEs
- CVE-2025-6152 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, was found in Steel Browser up to 0.1.3
- CVE-2023-52263 MEDIUM 6.1 UPGRADE Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect
- CVE-2023-28364 MEDIUM 6.1 UPGRADE An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browse
- CVE-2021-22917 MEDIUM 6.5 UPGRADE Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS req
- CVE-2017-18016 MEDIUM 5.3 DOWNGRADE Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitiv