CVE-2022-24071

MEDIUM

Whale < 3.12.129.46 - Rendering Process Compromise via Built-in Extension

Title source: llm

Description

A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://cve.naver.com/detail/cve-2022-24071

Scores

CVSS v3 4.3

EPSS 0.0064

EPSS Percentile 45.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE

CWE-648

Status published

Products (1)

navercorp/whale < 1.14.0

Published Jan 28, 2022

Tracked Since Feb 18, 2026