SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2025-62583

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.50%

41th percentile - higher than 41% of all known CVEs

Summary

Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.

Risk Assessment

An attacker can bypass browser isolation mechanisms, potentially leading to data security breaches and unauthorized actions.

Recommendation

Update Whale Browser to version 4.33.325.17 or later, which includes a fix for this vulnerability.

Other vulnerabilities in Whale Browser

See all
Original NVD description (English source)

Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS