CVE-2022-24075 Other in NAVER Whale browser

What is CVE-2022-24075?

CVE-2022-24075 is a medium-severity vulnerability in NAVER Whale browser, published on 17 Mar 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.

Weakness: CWE-552

Which versions are affected by CVE-2022-24075?

It affects 1 product.

Products include Navercorp Whale.

How do I fix CVE-2022-24075?

No fix has been published for CVE-2022-24075 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-24075 being exploited?

There is no known exploitation of CVE-2022-24075 in the wild and no public exploit code.

Other vulnerabilities in NAVER Whale browser

• CVE-2025-62583 Security feature bypass in NAVER Whale browser Critical 9.8
• CVE-2025-53599 Cross-site scripting in NAVER Whale browser Critical 9.8
• CVE-2022-24074 Missing authorization in NAVER Whale browser Critical 9.8
• CVE-2025-69234 Security feature bypass in NAVER Whale browser Critical 9.1
• CVE-2018-9859 Privilege escalation in n/a High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4rvm-66vq-v2f2.