# NAVER Whale browser.

Every CVE that names NAVER Whale browser among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Origin validation error in NAVER Whale browser](https://agentprime.io/advisories/CVE-2026-120987.md)
  `CVE-2026-120987` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-346
- [Origin validation error in NAVER Whale browser](https://agentprime.io/advisories/CVE-2025-69235.md)
  `CVE-2025-69235` · CVE record: NAVER NAVER Whale browser · CVSS 7.5 High · Not analysed yet · Published 30 Dec 2025 · Tags: CWE-346
- [Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.](https://agentprime.io/advisories/CVE-2025-69234.md)
  `CVE-2025-69234` · CVE record: NAVER NAVER Whale browser · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Dec 2025 · Tags: CWE-358
- [Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.](https://agentprime.io/advisories/CVE-2025-62585.md)
  `CVE-2025-62585` · CVE record: NAVER NAVER Whale browser · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-358
- [Origin validation error in NAVER Whale browser](https://agentprime.io/advisories/CVE-2025-62584.md)
  `CVE-2025-62584` · CVE record: NAVER NAVER Whale browser · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-346
- [Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.](https://agentprime.io/advisories/CVE-2025-62583.md)
  `CVE-2025-62583` · CVE record: NAVER NAVER Whale browser · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-358
- [Origin validation error in NAVER Whale browser](https://agentprime.io/advisories/CVE-2025-53600.md)
  `CVE-2025-53600` · CVE record: NAVER NAVER Whale browser · CVSS 7.5 High · Not analysed yet · Published 4 Jul 2025 · Tags: CWE-346
- [Cross-site scripting in NAVER Whale browser](https://agentprime.io/advisories/CVE-2025-53599.md)
  `CVE-2025-53599` · CVE record: NAVER NAVER Whale browser · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in NAVER Whale browser](https://agentprime.io/advisories/CVE-2024-40618.md)
  `CVE-2024-40618` · CVE record: NAVER NAVER Whale browser · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jul 2024 · Tags: Cross-site scripting (XSS)
- [Exposure of personal information in NAVER Whale browser](https://agentprime.io/advisories/CVE-2023-25632.md)
  `CVE-2023-25632` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 27 Nov 2023 · Tags: Information disclosure
- [Improper access control in NAVER Whale browser](https://agentprime.io/advisories/CVE-2020-9754.md)
  `CVE-2020-9754` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 27 Jun 2022 · Tags: Broken access control
- [Files accessible to external parties in NAVER Whale browser](https://agentprime.io/advisories/CVE-2022-24075.md)
  `CVE-2022-24075` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 17 Mar 2022 · Tags: Information disclosure
- [Resource exposure in NAVER Whale browser](https://agentprime.io/advisories/CVE-2022-24074.md)
  `CVE-2022-24074` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 17 Mar 2022 · Tags: Information disclosure
- [The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.](https://agentprime.io/advisories/CVE-2022-24073.md)
  `CVE-2022-24073` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 17 Mar 2022 · Tags: CWE-648
- [Improper privilege management in NAVER Whale browser](https://agentprime.io/advisories/CVE-2022-24072.md)
  `CVE-2022-24072` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 17 Mar 2022 · Tags: Privilege escalation
- [A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs.](https://agentprime.io/advisories/CVE-2022-24071.md)
  `CVE-2022-24071` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 28 Jan 2022 · Tags: CWE-648
- [Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may lead to address bar spoofing.](https://agentprime.io/advisories/CVE-2021-33593.md)
  `CVE-2021-33593` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 2 Nov 2021 · Tags: CWE-451

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=naver-whale-browser>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/naver-whale-browser/>. Everything for agents: <https://agentprime.io/llms.txt>.