Whale vulnerabilities

2 known vulnerabilities in Whale from Navercorp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  NAVER Whale browser: Exposure of Resource to Wrong Sphere

  CVE-2022-24074Mar 17, 2022NAVEREPSS 1.05%

  Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script itself that could lead to controlling Whale Bridge if the rendering process compromises.

• 7.1 High severity

  NAVER Whale browser: Incorrect Use of Privileged APIs

  CVE-2022-24073Mar 17, 2022NAVER

  The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.