NAVER vulnerabilities
35 published CVEs name NAVER among the affected products.
- Published CVEs
- 35
- Last 12 months
- 8
- Critical
- 10
- Known exploited
- 0
Critical 10High 11Medium 12Low 1Not scored 1
CVEs per yearBy the year they were published
- 20213
- 20227
- 20231
- 20248
- 202510
- 20266
Newest CVEs
- CVE-2026-120988
billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering.
NAVER · billboard.js
Medium6.1 - CVE-2026-120987
Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox in a dual-tab environment.
NAVER · NAVER Whale browser
Not scored - CVE-2026-8148
NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to…
NAVER · NAVER MYBOX Explorer
High7.8 - CVE-2026-1513
billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.
NAVER · billboard.js
Medium6.1 - CVE-2026-23769
lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset…
NAVER · lucy-xss-filter
Medium6.5 - CVE-2026-23768
lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the ObjectSecurityListener or…
NAVER · lucy-xss-filter
Medium6.1 - CVE-2025-69235
Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar environment.
NAVER · NAVER Whale browser
High7.5 - CVE-2025-69234
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.
NAVER · NAVER Whale browser
Critical9.1 - CVE-2025-62585
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment.
NAVER · NAVER Whale browser
High7.5 - CVE-2025-62584
Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment.
NAVER · NAVER Whale browser
High7.5