PT-2025-53834 · Unknown · Whale Browser

Mingi Jung · Published 2025-12-30 · Updated 2026-01-04 · CVE-2025-69234

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Whale browser versions prior to 4.35.351.12

Description The Whale browser is susceptible to an iframe sandbox escape in a sidebar environment. An attacker can leverage this to bypass security restrictions imposed by the iframe sandbox.

Recommendations Update the Whale browser to version 4.35.351.12 or later.

Fix

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-358

Related Identifiers

CVE-2025-69234

Affected Products

Whale Browser

References · 7

• https://cve.naver.com/detail/cve-2025-69234.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69234 · Security Note
• https://osv.dev/vulnerability/CVE-2025-69234 · Vendor Advisory
• https://t.me/cveNotify/147365 · Telegram Post
• https://t.me/CVEtracker/40906 · Telegram Post
• https://twitter.com/cracbot/status/2007769021828239568 · Twitter Post
• https://t.me/cveNotify/147099 · Telegram Post