High
Security advisory
Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2016-10718
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 09:39 UTC · Revision 1
Source evidence
Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.
osv:CVE-2016-10718
Complete source record
{
"id": "37a8c620ca7e8c6ce8d6c508a1e111aec9a1a8b2ebf180b43dbacbbe7d1feba8",
"url": "https://osv.dev/vulnerability/CVE-2016-10718",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2016-10718",
"summary": "Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.",
"evidence": "osv:CVE-2016-10718",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2016-10718",
"aliases": [
"CVE-2016-10718"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/brave/browser-laptop",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "8ca012746331c78c65c91cde07db4b2a6b2b97b8"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:brave:brave_browser:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "0.13.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v0.13.0dev-RC6",
"v0.13.0dev-RC5",
"v0.13.0dev-RC4",
"v0.13.0dev-RC3",
"v0.13.0dev-RC2",
"v0.13.0dev-RC1",
"v0.13.0dev-Preview10",
"v0.13.0dev-Preview9",
"v0.13.0dev-Preview8",
"v0.13.0dev-Preview7",
"v0.13.0dev-Preview5",
"v0.13.0dev-Preview4",
"v0.12.15dev-RC1",
"v0.13.0dev-Preview3",
"v0.12.10dev-RC1",
"v0.12.10dev",
"v0.12.10dev-Preview1",
"v0.12.9dev",
"v0.12.9dev-RC1",
"v0.12.9dev-Preview3",
"v0.12.9dev-Preview2",
"v0.12.9dev-Preview1",
"v0.12.8dev-Preview2",
"v0.12.7dev-RC2",
"v0.12.7dev-RC1",
"v0.12.7dev-Preview1",
"v0.12.6dev",
"v0.12.6dev-RC2",
"v0.12.6dev-RC1",
"v0.12.6dev-Preview2",
"v0.12.6dev-Preview1",
"v0.12.6.dev-Preview1",
"do-not-publish-me",
"v0.12.5dev-RC4",
"v0.12.5dev-RC3",
"v0.12.5dev-RC2",
"v0.12.5dev-RC1",
"v0.12.5dev-Preview2",
"v0.12.5dev-Preview1",
"v0.12.4dev-RC1",
"v0.12.4dev",
"v0.12.4dev-Preview3",
"v0.12.4dev-Preview2",
"v0.12.4dev-Preview1",
"v0.12.3dev",
"0.12.3dev",
"0.12.3dev-RC6",
"0.12.3dev-RC5",
"0.12.3dev-RC4",
"0.12.3dev-RC3",
"0.12.3dev-RC2",
"0.12.3dev-RC1",
"0.12.2dev-RC4",
"0.12.2dev-RC3",
"0.12.2dev-RC2",
"0.12.2dev-RC1",
"0.12.1dev",
"0.12.1dev-RC2",
"0.12.1dev-RC1",
"0.12.1dev-Preview2",
"0.12.1dev-Preview3",
"0.12.1dev-Preview1",
"0.12.0dev",
"0.12.0dev-RC2",
"0.12.0dev-RC1",
"0.12.0dev-Beta1",
"0.11.6dev-RC2",
"0.11.6dev-RC1",
"0.11.6",
"0.11.6-beta6",
"v0.11.6dev-beta5",
"v0.11.6dev-beta4",
"v0.11.6dev-beta3",
"v0.11.6dev-beta2",
"v0.11.6dev",
"v0.11.5dev",
"v0.11.4dev",
"v0.11.3dev",
"v0.11.2dev",
"v0.11.2dev-rc1",
"v0.11.2dev-beta2",
"v0.11.2dev-beta1",
"v0.11.1dev_rc1",
"v0.11.1dev_beta2",
"v0.11.1dev_beta1",
"v0.10.5dev",
"v0.10.4dev",
"v0.10.3dev",
"v0.10.2dev",
"v0.10.1dev",
"0.10.1dev-BETA3",
"v0.10.1dev-BETA2",
"v0.10.1dev-BETA1",
"v0.10.0dev",
"v0.9.5dev",
"v0.9.3dev",
"v0.9.2dev",
"v0.9.1dev",
"v0.8.3dev",
"v0.8.2dev",
"v0.8.1dev",
"v0.8.0dev",
"v0.7.17beta",
"v0.7.16dev",
"v0.7.15dev",
"v0.7.14dev",
"v0.7.13dev",
"v0.7.11dev",
"v0.7.10dev",
"v0.7.9dev",
"v0.7.8dev",
"v0.7.7dev",
"v0.0.7dev",
"v0.0.7"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10718.json"
}
}
],
"modified": "2026-10-20T10:47:25.555219037Z",
"provider": "osv",
"references": [
"https://github.com/brave/browser-laptop/issues/5006",
"https://github.com/brave/browser-laptop/issues/5007",
"https://hackerone.com/reports/176197",
"https://www.exploit-db.com/exploits/44475/"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2016-10718",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 379378,
"published_at": "2018-04-04T02:29:00.21+00:00"
}