by Kastro
Paper/Archive/CVE-2022-24074

CVE-2022-24074

NAVER NAVER Whale browser — Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script…

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 64.3.643 × 2012.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script itself that could lead to controlling Whale Bridge if the rendering process compromises.

Affected

ProductAffectedFixed inSource
NAVER Whale browserunspecified – < 3.12.129.463.12.129.46CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcve.naver.com/detail/cve-2022-24074