CVE-2026-120987

CVSS 7.5 (high) · published 2026-11-03

Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.

Weakness: CWE-346

Source: NVD CVE-2026-120987

References

• https://cve.naver.com/detail/cve-2026-120987.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.