Advisories · Technology

NAVER Whale browser.

Every CVE that names NAVER Whale browser among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-120987 CVE record

Origin validation error in NAVER Whale browser
- NAVER Whale browser
- CWE-346
Not analysed yet 3 Nov 2026
CVE-2025-69235 CVE record

CVSS 7.5 High

Origin validation error in NAVER Whale browser
- NAVER Whale browser
- CWE-346
Not analysed yet 30 Dec 2025
CVE-2025-69234 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.
- NAVER Whale browser
- CWE-358
Not analysed yet 30 Dec 2025
CVE-2025-62585 CVE record

CVSS 7.5 High

Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.
- NAVER Whale browser
- CWE-358
Not analysed yet 16 Oct 2025
CVE-2025-62584 CVE record

CVSS 7.5 High

Origin validation error in NAVER Whale browser
- NAVER Whale browser
- CWE-346
Not analysed yet 16 Oct 2025
CVE-2025-62583 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.
- NAVER Whale browser
- CWE-358
Not analysed yet 16 Oct 2025
CVE-2025-53600 CVE record

CVSS 7.5 High

Origin validation error in NAVER Whale browser
- NAVER Whale browser
- CWE-346
Not analysed yet 4 Jul 2025
CVE-2025-53599 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cross-site scripting in NAVER Whale browser
- NAVER Whale browser
- Cross-site scripting (XSS)
Not analysed yet 4 Jul 2025
CVE-2024-40618 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site scripting in NAVER Whale browser
- NAVER Whale browser
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2024
CVE-2023-25632 CVE record

Exposure of personal information in NAVER Whale browser
- NAVER Whale browser
- Information disclosure
Not analysed yet 27 Nov 2023
CVE-2020-9754 CVE record

Improper access control in NAVER Whale browser
- NAVER Whale browser
- Broken access control
Not analysed yet 27 Jun 2022
CVE-2022-24075 CVE record

Files accessible to external parties in NAVER Whale browser
- NAVER Whale browser
- Information disclosure
Not analysed yet 17 Mar 2022
CVE-2022-24074 CVE record

Resource exposure in NAVER Whale browser
- NAVER Whale browser
- Information disclosure
Not analysed yet 17 Mar 2022
CVE-2022-24073 CVE record

The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.
- NAVER Whale browser
- CWE-648
Not analysed yet 17 Mar 2022
CVE-2022-24072 CVE record

Improper privilege management in NAVER Whale browser
- NAVER Whale browser
- Privilege escalation
Not analysed yet 17 Mar 2022
CVE-2022-24071 CVE record

A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs.
- NAVER Whale browser
- CWE-648
Not analysed yet 28 Jan 2022
CVE-2021-33593 CVE record

Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may lead to address bar spoofing.
- NAVER Whale browser
- CWE-451
Not analysed yet 2 Nov 2021