Description
Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.
Problem types
CWE-358 Improperly Implemented Security Check for Standard
Product status
4.33.325.17
Credits
Mingi Jung, mingijung.grape@gmail.com, Ulsan National Institute of Science and Technology-Web Sec Lab
References
cve.naver.com/detail/cve-2025-62583.html (NAVER Security Advisory)
