Whale Browser (< 5.39.412.57) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/whale-browser--5.39.412.57/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 06 Nov 2026 21:29:19 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgWhale Browser: Iframe sandbox bypass (CVE-2026-120987)https://feed.craftedsignal.io/briefs/2026-11-whale-browser-sandbox-bypass/Fri, 06 Nov 2026 21:29:19 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-whale-browser-sandbox-bypass/Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.<p>Whale Browser before 5.39.412.57 contains a vulnerability that allows an attacker to bypass the iframe sandbox in a dual-tab environment.</p> highadvisory