CVE-2022-24071 Other in NAVER Whale browser

What is CVE-2022-24071?

CVE-2022-24071 is a medium-severity vulnerability in NAVER Whale browser, published on 28 Jan 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs.

Weakness: CWE-648

Which versions are affected by CVE-2022-24071?

It affects 1 product.

Products include Navercorp Whale.

How do I fix CVE-2022-24071?

No fix has been published for CVE-2022-24071 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-24071 being exploited?

There is no known exploitation of CVE-2022-24071 in the wild and no public exploit code.

Other vulnerabilities in NAVER Whale browser

• CVE-2025-62583 Security feature bypass in NAVER Whale browser Critical 9.8
• CVE-2025-53599 Cross-site scripting in NAVER Whale browser Critical 9.8
• CVE-2022-24074 Missing authorization in NAVER Whale browser Critical 9.8
• CVE-2025-69234 Security feature bypass in NAVER Whale browser Critical 9.1
• CVE-2018-9859 Privilege escalation in n/a High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8frv-q5f8-46jf.