Naver vulnerabilities
Published CVEs affecting Naver products: 9 record(s), with severity, exploitation and fixes.
CVE-2026-8148
High · 7.8
CWE-266 May 8, 2026
NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate…
NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks.
CVE-2026-1513
Medium · 6.1
CWE-79 Jan 27, 2026
Cross-site Scripting (XSS) in Naver Billboard.js
billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.
CVE-2026-23769
Medium · 6.1
CWE-79 Jan 16, 2026
Cross-site Scripting (XSS) in Naver Lucy-xss-filter
lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.
CVE-2026-23768
Medium · 6.1
CWE-918 Jan 16, 2026
Server-Side Request Forgery (SSRF) in Naver Lucy-xss-filter
lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the ObjectSecurityListener or EmbedSecurityListener option is enabled and embed or object tags are used with a src attribute missing a file extension.
CVE-2025-69235
High · 7.5
CWE-346 Dec 29, 2025
Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in…
Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.
CVE-2025-69234
Critical · 9.1
CWE-358 Dec 29, 2025
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a…
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.
CVE-2025-62585
High · 7.5
CWE-358 Oct 16, 2025
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security…
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.
CVE-2025-62584
High · 7.5
CWE-346 Oct 16, 2025
Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in…
Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment.
CVE-2025-62583
Critical · 9.8
CWE-358 Oct 16, 2025
Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a…
Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.