CVE-2026-120987

{"id": "CVE-2026-120987", "cveTags": [], "metrics": {}, "affected": [{"source": "cve@navercorp.com", "affectedData": [{"vendor": "NAVER", "product": "NAVER Whale browser", "versions": [{"status": "unaffected", "version": "5.39.412.57"}], "defaultStatus": "affected"}]}], "published": "2026-11-03T07:18:21.527", "references": [{"url": "https://cve.naver.com/detail/cve-2026-120987.html", "source": "cve@navercorp.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cve@navercorp.com", "description": [{"lang": "en", "value": "CWE-346"}]}], "descriptions": [{"lang": "en", "value": "Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment."}], "lastModified": "2026-11-03T16:30:49.290", "sourceIdentifier": "cve@navercorp.com"}