CVE-2022-24075: vulnerability in NAVER Whale browser
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.
Affected products
NAVER · NAVER Whale browserRelated CVEs — NAVER Whale browser
In the same product, most dangerous first.