CVE Catalog

CVE-2025-69234

Critical
Published: Translated: NVD NIST

Summary

Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.

Risk Assessment

The risk for the organization is the possibility of breaking browser isolation, potentially leading to unauthorized code execution or access to sensitive data in the browser context.

Recommendation

It is recommended to immediately update the Whale browser to the latest version that includes the fix.

Original NVD description (English source)

Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS