Meta Platforms 3

Organization

CVE-2025-55177: Meta Platforms WhatsApp Incorrect Authorization Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 02, 2025

Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL...

Vulnerabilities & Patching

CVE-2019-18426: WhatsApp Cross-Site Scripting Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog May 23, 2022

A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.

Vulnerabilities & Patching

CVE-2019-3568: WhatsApp VOIP Stack Buffer Overflow Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Apr 19, 2022

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.

Vulnerabilities & Patching