Skip to content
OpenAdvisories
High · 7.5 CVE-2026-120987 EUVD-2026-115692GHSA-w838-4h8q-4jvq

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.

Published Nov 3, 2026 · Updated Nov 6, 2026 · Assigned by naver

Vendor: NAVER Product: NAVER Whale browser

Description

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.

Affected products

VendorProductAffectedFixed
NAVER NAVER Whale browser — 5.39.412.57

References