CVE-2026-120987 PUBLISHED

Assigner: naver
Reserved: 03.11.2026 Published: 03.11.2026 Updated: 03.11.2026

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.

Product Status

Vendor NAVER
Product NAVER Whale browser
Versions Default: affected
  • Version 5.39.412.57 is unaffected

Credits

  • Namhyeong Kim (fivehong) finder

References

Problem Types

  • CWE-346 Origin Validation Error CWE