PT-2025-44560 · Brave · Brave Browser Desktop

CVE-2025-48980 · Published 2025-10-30 · Updated 2025-10-31

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brave Browser versions prior to 1.83.10

Description The "Open Link in Split View" context menu item in Brave Browser Desktop did not correctly handle the SameSite cookie attribute when the split view feature was enabled. Specifically, SameSite=Strict cookies were sent during cross-site navigation using this method.

Recommendations Update Brave Browser to version 1.83.10 or later.

Fix

Weakness Enumeration

CWE-565

Related Identifiers

CVE-2025-48980

Affected Products

Brave Browser Desktop

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-48980 · Security Note
• https://twitter.com/CVEnew/status/1984108370778058864 · Twitter Post
• https://hackerone.com/reports/3253725 · Note
• https://t.me/CVEtracker/36249 · Telegram Post
• https://t.me/cveNotify/141069 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1984173038703644895 · Twitter Post