BaseFortify

Publication date: 2025-10-16

Last updated on: 2025-10-21

Assigner: Naver Corporation

Description

Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-16

Last Modified

2025-10-21

Generated

2026-07-06

AI Q&A

2025-10-16

EPSS Evaluated

2026-07-05

NVD

CVE-2025-62583

EUVD

EUVD-2025-34719

Affected Vendors & Products

Vendor	Product	Version / Range
navercorp	whale	to 4.33.325.17 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-358	The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.

Attack-Flow Graph

Executive Summary

This vulnerability in Whale Browser versions before 4.33.325.17 allows an attacker to escape the iframe sandbox when using a dual-tab environment. This means that an attacker can bypass the security restrictions normally imposed on iframes, potentially gaining unauthorized access or control beyond the intended sandboxed area.

Impact Analysis

The vulnerability can allow an attacker to break out of the iframe sandbox, which may lead to unauthorized access to browser content or data, potentially compromising user privacy or security within the browser environment.

Hi! I’m here to help you understand CVE-2025-62583. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70