CVE-2025-69235

HighCVSS 7.5

Published: 30/12/2025(UTC)Updated: 30/09/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

4th percentile - higher than 4% of all known CVEs

Summary

Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.

Risk Assessment

Bypassing Same-Origin Policy could allow an attacker to access data from other sites in the sidebar context, potentially leading to data theft or unauthorized actions.

Recommendation

Update Whale browser to version 4.35.351.12 or later.

Other vulnerabilities in Whale browser

See all

CVE-2025-69234Critical
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.
CVE-2025-62583Critical
Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.

Original NVD description (English source)

Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS