CVE-2026-120987

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment...

CVE-2026-120987

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment...

CVE-2026-120987

Whale Browser versions prior to 5.39.412.57 are vulnerable to an iframe sandbox bypass occurring within a dual-tab environment . The root cause is associated with an Origin Validation Error (CWE-346). No specific exploit details or remediation instructions are provided in the documents.

EUVD-2026-115692

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment...

CVE-2023-25632

The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser unlock function via 'Open in Whale' feature...

CVE-2021-33593

Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may lead to address bar spoofing...

CVE-2025-69234

Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment...

CVE-2025-69235

Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment...

EUVD-2025-205678

Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment...

EUVD-2025-205677

Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment...

CVE-2025-69234

Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment...

CVE-2025-69234

Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment...

CVE-2025-69235

Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment...

CVE-2025-69235

Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment...

CVE-2025-69235

Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment...

CVE-2025-69235

Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment...

CVE-2025-69235

Whale browser versions prior to 4.35.351.12 are vulnerable to an Origin Validation Error (CWE-346). This flaw allows an attacker to bypass the Same-Origin Policy within a sidebar environment , potentially leading to unauthorized access to data or functionality. Remediation is available by updatin...

CVE-2025-69234

Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment...

CVE-2025-69234

Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment...

CVE-2025-69234

The Whale browser (specifically versions prior to 4.35.351.12 ) is vulnerable to an iframe sandbox escape within its sidebar environment. This vulnerability, identified as CWE-358 (Improperly Implemented Security Check for Standard), allows an attacker to bypass security restrictions imposed by t...