Vulnerabilidades de Naver
CVEs publicadas que afetam produtos de Naver: 9 registro(s), com severidade, exploração e correções.
CVE-2026-8148
Alta · 7.8
CWE-266 08/05/2026
NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate…
NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks.
CVE-2026-1513
Média · 6.1
CWE-79 27/01/2026
Cross-site Scripting (XSS) em Naver Billboard.js
billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.
CVE-2026-23769
Média · 6.1
CWE-79 16/01/2026
Cross-site Scripting (XSS) em Naver Lucy-xss-filter
lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.
CVE-2026-23768
Média · 6.1
CWE-918 16/01/2026
Server-Side Request Forgery (SSRF) em Naver Lucy-xss-filter
lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the ObjectSecurityListener or EmbedSecurityListener option is enabled and embed or object tags are used with a src attribute missing a file extension.
CVE-2025-69235
Alta · 7.5
CWE-346 29/12/2025
Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in…
Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.
CVE-2025-69234
Crítica · 9.1
CWE-358 29/12/2025
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a…
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.
CVE-2025-62585
Alta · 7.5
CWE-358 16/10/2025
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security…
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.
CVE-2025-62584
Alta · 7.5
CWE-346 16/10/2025
Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in…
Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment.
CVE-2025-62583
Crítica · 9.8
CWE-358 16/10/2025
Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a…
Whale Browser before 4.33.325.17 allows an attacker to escape the iframe sandbox in a dual-tab environment.