Facebook

8 results · Clear filters · Feed

• Medium 5.4
  CVE-2025-55177 Exploited Public exploit EPSS 14%

  Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp B…

  Facebook WhatsApp for iOS WhatsApp Business for iOS WhatsApp Desktop for Mac iOS
  Aug 29, 2025

  KEV Sep 2, 2025
• Critical 9.8
  CVE-2023-28753 Public exploit

  netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could…

  Facebook netconsd
  May 18, 2023
• High 8.4
  CVE-2021-24040 Public exploit EPSS 17%

  Deserialization of Untrusted Data in parlai

  Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.

  Facebook ParlAI parlai PyPI
  Sep 10, 2021
• Unscored —
  CVE-2021-24027 Public exploit

  A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may h…

  Facebook WhatsApp for Android WhatsApp Business for Android Android
  Apr 6, 2021
• High 8.2
  CVE-2019-18426 Exploited Public exploit EPSS 68%

  A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2…

  Facebook WhatsApp Desktop
  Jan 21, 2020

  KEV May 23, 2022
• Unscored —
  CVE-2019-11931 Public exploit

  A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user…

  Facebook WhatsApp for Android WhatsApp Business for Android WhatsApp for iOS Windows Android iOS
  Nov 14, 2019
• Unscored —
  CVE-2019-11933 Public exploit

  A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.1…

  Facebook WhatsApp for Android Android
  Oct 23, 2019
• Medium 6.1
  CVE-2018-6341 Public exploit

  Cross-Site Scripting in react-dom

  React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x,…

  Facebook react-dom react-dom npm
  Dec 31, 2018