Whale Browser for iOS JavaScript Injection Vulnerability Allowing Script Execution

Vulnerability

A vulnerability in Whale browser for iOS, prior to version 3.9.1.4206, allows attackers to execute malicious scripts within the browser. This is achieved by exploiting a crafted JavaScript scheme.

Impact

Exploitation of this vulnerability allows for the execution of arbitrary scripts in the context of the user's browser.

Added: Jul 4, 2025, 8:19 AM
Updated: Jul 4, 2025, 8:19 AM

Vulnerability Rating

Custom Algorithm
spread
6.6
impact
1.3
exploitability
4.4
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.