İçeriğe atla
Noroxi

navercorp kayıtları

navercorp üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 22
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

22 kayıt
  • CVE-2022-24074
    39İzleyin

    Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script it

    KritikCVSS 9,8İstismar yokEPSS %1

    navercorp · whale17 Mar 2022

  • CVE-2025-62583
    39İzleyin

    Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.

    KritikCVSS 9,8İstismar yokEPSS %0

    navercorp · whale16 Eki 2025

  • CVE-2025-53599
    39İzleyin

    Whale browser for iOS before 3.9.1.4206 allow an attacker to execute malicious scripts in the browser via a crafted javascript scheme.

    KritikCVSS 9,8İstismar yokEPSS %0

    navercorp · whale4 Tem 2025

  • CVE-2025-69234
    36İzleyin

    Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.

    KritikCVSS 9,1İstismar yokEPSS %0

    navercorp · whale30 Ara 2025

  • CVE-2018-9859
    32İzleyin

    The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7.

    YüksekCVSS 8,1İstismar yokEPSS %0

    navercorp · whale15 Haz 2018

  • CVE-2017-15913
    31İzleyin

    The Installer in Whale allows DLL hijacking.

    YüksekCVSS 7,8İstismar yokEPSS %1

    navercorp · whale7 Oca 2018

  • CVE-2018-12449
    31İzleyin

    The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking.

    YüksekCVSS 7,8İstismar yokEPSS %0

    navercorp · whale11 Eki 2018

  • CVE-2025-58322
    31İzleyin

    NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrar

    YüksekCVSS 7,8İstismar yokEPSS %0

    navercorp · mybox28 Ağu 2025

  • CVE-2026-8148
    31İzleyin

    NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipu

    YüksekCVSS 7,8İstismar yokEPSS %0

    navercorp · mybox8 May 2026

  • CVE-2025-62585
    30İzleyin

    Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.

    YüksekCVSS 7,5İstismar yokEPSS %0

    navercorp · whale16 Eki 2025

  • CVE-2025-62584
    30İzleyin

    Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment.

    YüksekCVSS 7,5İstismar yokEPSS %0

    navercorp · whale16 Eki 2025

  • CVE-2025-53600
    30İzleyin

    Whale browser before 4.32.315.22 allow an attacker to bypass the Same-Origin Policy in a dual-tab environment.

    YüksekCVSS 7,5İstismar yokEPSS %0

    navercorp · whale4 Tem 2025

  • CVE-2025-69235
    30İzleyin

    Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.

    YüksekCVSS 7,5İstismar yokEPSS %0

    navercorp · whale30 Ara 2025

  • CVE-2025-58323
    30İzleyin

    NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitra

    YüksekCVSS 7,7İstismar yokEPSS %0

    navercorp · mybox29 Ağu 2025

  • CVE-2022-24073
    28İzleyin

    The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users acce

    YüksekCVSS 7,1İstismar yokEPSS %0

    navercorp · whale17 Mar 2022

  • CVE-2022-24075
    26İzleyin

    Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP fi

    OrtaCVSS 6,5İstismar yokEPSS %0

    navercorp · whale17 Mar 2022

  • CVE-2022-24072
    24İzleyin

    The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store we

    OrtaCVSS 6,1İstismar yokEPSS %0

    navercorp · whale17 Mar 2022

  • CVE-2018-7635
    21İzleyin

    Whale Browser before 1.0.41.8 displays no URL information but only a title of a web page on the browser's address bar when visiting a blank

    OrtaCVSS 5,3İstismar yokEPSS %0

    navercorp · whale3 Tem 2018

  • CVE-2018-12448
    21İzleyin

    Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-ht

    OrtaCVSS 5,3İstismar yokEPSS %0

    navercorp · whale2 Ağu 2018

  • CVE-2020-9754
    21İzleyin

    NAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock function via incognito mode.

    OrtaCVSS 5,3İstismar yokEPSS %0

    navercorp · whale26 Haz 2022

  • CVE-2021-33593
    21İzleyin

    Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may

    OrtaCVSS 5,3İstismar yokEPSS %0

    navercorp · whale2 Kas 2021

  • CVE-2022-24071
    17İzleyin

    A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controllin

    OrtaCVSS 4,3İstismar yokEPSS %0

    navercorp · whale28 Oca 2022