CVE-2022-24073: Navercorp Whale

High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days.

The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to any URL when users access the store.

Affected products

• Navercorp Whale: before 3.12.129.18 (fixed in 3.12.129.18)

Published 2022-03-17. Last modified 2026-06-17.