CVE-2025-69234
Critical · 9.1CVSS
9.1
EPSS
0.3%
Published
Dec 30, 2025
CISA due date
—
The record
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|