CVE-2025-62585
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.
Risk Assessment
Bypassing Content Security Policy may enable execution of malicious scripts or loading of unauthorized content, compromising browser security. The risk applies to users of Whale browser versions before 4.33.325.17.
Recommendation
Update Whale browser to version 4.33.325.17 or later. Avoid visiting untrusted sites in a dual-tab environment.
Other vulnerabilities in Whale browser
See all- CVE-2025-69234Critical
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.
- CVE-2025-62583Critical
Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.
- CVE-2025-69235High
Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.
- CVE-2025-62584High
Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment. This may enable unauthorized access to data between tabs.
Original NVD description (English source)
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS