A browser-based attack is an exploitation path where a web browser becomes part of the attack chain. The trigger may be a malicious page, a booby-trapped advertisement, a crafted link, or another web-delivered payload that runs in the browser’s context. From there, the attacker may steal session data, force a dangerous request, or exploit a vulnerable web component to reach a broader system.
This matters because browsers are trusted entry points for users and administrators. If a control panel, dashboard, or internal tool is reachable through a browser, a browser-mediated flaw can turn simple web access into code execution or unauthorized control. Defenders reduce risk by patching browser and application vulnerabilities, limiting access to trusted networks, enforcing strong authentication, and treating administrative web interfaces as sensitive attack surface.