NAVER Whale browser vulnerabilities

3 known vulnerabilities in NAVER Whale browser from NAVER. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  NAVER Whale browser: Improper Neutralization of Input During Web Page Generation

  CVE-2024-40618Jul 11, 2024NAVER

  Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when processing a built-in extension.

• 9.8 Critical severity

  NAVER Whale browser: Exposure of Resource to Wrong Sphere

  CVE-2022-24074Mar 17, 2022NAVEREPSS 1.05%

  Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script itself that could lead to controlling Whale Bridge if the rendering process compromises.

• 7.1 High severity

  NAVER Whale browser: Incorrect Use of Privileged APIs

  CVE-2022-24073Mar 17, 2022NAVER

  The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.