CVE-2026-120987
UnknownSummary
Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.
Risk Assessment
Bypassing the iframe sandbox may enable execution of malicious code or access to resources that should be isolated, potentially compromising browser security.
Recommendation
Upgrade Whale Browser to version 5.39.412.57 or later.
Other vulnerabilities in Whale Browser
See all- CVE-2025-69234Critical
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.
- CVE-2025-62583Critical
Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.
- CVE-2025-69235High
Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.
- CVE-2025-62585High
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.
- CVE-2025-62584High
Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment. This may enable unauthorized access to data between tabs.
Original NVD description (English source)
Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS