PT-2022-16450 · Unknown · Whale Browser

Young Min Kim · Published 2022-01-28 · Updated 2022-02-02 · CVE-2022-24071

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Whale browser versions prior to 3.12.129.46

Description A Built-in extension in the Whale browser allows attackers to compromise the rendering process, which could lead to controlling browser internal APIs.

Recommendations For versions prior to 3.12.129.46, update to version 3.12.129.46 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-648

Related Identifiers

CVE-2022-24071

Affected Products

Whale Browser

References · 5

• https://cve.naver.com/detail/cve-2022-24071 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24071 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24071 · Security Note
• https://t.me/cibsecurity/36447 · Telegram Post
• https://t.me/cvenotify/25962 · Telegram Post