CVE-2022-24071

Medium

A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to…

naver·CWE-648·Published 2022-01-28

CVSS

4.3

EPSS

0.01

KEV

Exploits

cve.orgen

164 chars

A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs.

NVDen

164 chars

A Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the rendering process which could lead to controlling browser internal APIs.

Una extensión incorporada en Whale browser versiones anteriores a 3.12.129.46, permite a atacantes comprometer el proceso de renderizado, lo que podría conllevar a un control de las API internas del navegador

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N
3.1	Primary	NVD	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N