{"affected":[{"defaultStatus":"affected","product":"NAVER Whale browser","source":"CNA: naver","vendor":"NAVER","versions":[{"status":"unaffected","version":"5.39.412.57"}]}],"cveId":"CVE-2026-120987","cwes":["CWE-346"],"description":"Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793688136816,"publishedAt":1793688136816,"references":[{"source":"CNA: naver","tags":["vendor-advisory"],"url":"https://cve.naver.com/detail/cve-2026-120987.html"}],"remediation":[],"revision":"1a30320760dd26e40c193aa674b268490d4b9e3906820eea460e7c094d04987c","sources":[{"modifiedAt":1793688136816,"name":"CNA: naver","retrievedAt":1793689723279,"url":"https://www.cve.org/CVERecord?id=CVE-2026-120987"}],"ssvc":null,"status":"published","title":"CVE-2026-120987","updatedAt":1793689723279}