Description
Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment.
Published: 2025-10-16
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 21 Oct 2025 13:30:00 +0000

Type Values Removed Values Added
First Time appeared Navercorp
Navercorp whale
CPEs cpe:2.3:a:navercorp:whale:*:*:*:*:*:*:*:*
Vendors & Products Navercorp
Navercorp whale

Mon, 20 Oct 2025 13:30:00 +0000

Type Values Removed Values Added
First Time appeared Naver
Naver whale Browser
Vendors & Products Naver
Naver whale Browser

Thu, 16 Oct 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 16 Oct 2025 07:00:00 +0000

Type Values Removed Values Added
Description Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment.
Weaknesses CWE-346
References

Subscriptions

Naver Whale Browser
Navercorp Whale
cve-icon MITRE

Status: PUBLISHED

Assigner: naver

Published:

Updated: 2025-10-16T13:38:54.575Z

Reserved: 2025-10-16T06:44:59.554Z

Link: CVE-2025-62584

cve-icon Vulnrichment

Updated: 2025-10-16T13:38:48.227Z

cve-icon NVD

Status : Analyzed

Published: 2025-10-16T07:15:33.833

Modified: 2025-10-21T13:24:55.783

Link: CVE-2025-62584

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-10-20T13:25:20Z

Weaknesses