CVE-2025-53599

Description

Whale browser for iOS before 3.9.1.4206 allow an attacker to execute malicious scripts in the browser via a crafted javascript scheme.

Reserved 2025-07-04 | Published 2025-07-04 | Updated 2025-07-08 | Assigner naver

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

Default status
affected

3.9.1.4206
unaffected

Credits

un3xploitable finder

References

cve.naver.com/detail/cve-2025-53599.html (NAVER Security Advisory) vendor-advisory

cve.org (CVE-2025-53599)

nvd.nist.gov (CVE-2025-53599)

Download JSON