VULNERABILITY INTELLIGENCE

CVE-2022-24074

CVSS score9.8 CRITICAL
EPSS probability1.05%
CISA KEVNot currently listed
Published2022-03-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from the content script itself that could lead to controlling Whale Bridge if the rendering process compromises.

Weakness classification

  • cve@navercorp.com: CWE-668
  • nvd@nist.gov: CWE-668

Primary references