CVE-2025-62583: 
Homebrew vulnerability analysis and mitigation

A vulnerability has been identified in Whale Browser versions prior to 4.33.325.17 that allows attackers to bypass security controls. The vulnerability (CVE-2025-62583) was discovered and reported by Mingi Jung, and was publicly disclosed on October 16, 2025 (Naver Advisory).

The vulnerability enables attackers to escape the iframe sandbox protection mechanism specifically in a dual-tab environment. The issue has received a CVSS v3.1 base score of 9.8 CRITICAL with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, as assessed by CISA-ADP. The vulnerability is classified under CWE-358 (Improperly Implemented Security Check for Standard) (NVD).

Given the CRITICAL CVSS score of 9.8, this vulnerability presents severe security implications. The ability to escape the iframe sandbox could potentially allow attackers to bypass same-origin policy restrictions and access sensitive browser data or execute arbitrary code outside the sandboxed environment (NVD).

Users are advised to upgrade to Whale Browser version 4.33.325.17 or later to address this vulnerability. No alternative workarounds have been publicly documented (Naver Advisory).