Skip to contentFacebook vulnerabilities
Newest
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual...CVE-2019-35665.9 Medium
- facebook thriftLegacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving...CVE-2019-3565Fix available7.5 High
- facebook thriftImproper Input Validation and Excessive Iteration in Go Facebook ThriftCVE-2019-3564Fix available7.5 High
- facebook thriftJava Facebook Thrift servers would not error upon receiving messages with containers of fields of...CVE-2019-35597.5 High
- facebook thriftPython Facebook Thrift servers would not error upon receiving messages with containers of fields...CVE-2019-35587.5 High
- facebook thriftC++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers...CVE-2019-35527.5 High
- facebook wangleWangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances...CVE-2019-35639.8 Critical
- facebook hhvmInsufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds...CVE-2019-35619.8 Critical
- facebook fizzAn improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an...CVE-2019-35607.5 High
- facebook hhvmThe implementations of streams for bz2 and php://output improperly implemented their readImpl...CVE-2019-35579.8 Critical
- facebook wangleWangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection,...CVE-2019-35545.9 Medium
- facebook hhvmThe function number_format is vulnerable to a heap overflow issue when its second argument (...CVE-2018-63459.8 Critical
- facebook nuclideNuclide Improper Input ValidationCVE-2018-6333Fix available9.8 Critical
- facebook buckBuck parser-cache command loads/saves state using Java serialized object. If the state...CVE-2018-63319.8 Critical
- facebook proxygenAn issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of...CVE-2018-63477.5 High
- facebook proxygenA potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings ...CVE-2018-63467.5 High
- facebook whatsapp for android, whatsapp for ios, whatsapp for windows phone +1 more +3 moreA heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is...CVE-2018-63447.5 High
- facebook proxygenProxygen fails to validate that a secondary auth manager is set before dereferencing it. That can...CVE-2018-63437.5 High
- facebook react-dev-utilsreact-dev-utils on Windows vulnerable to Remote Code ExecutionCVE-2018-6342Fix available9.8 Critical
- facebook react, react-dom +1 moreCross-Site Scripting in react-domCVE-2018-6341Public exploitFix available6.1 Medium
- facebook hhvmThe Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting...CVE-2018-63408.1 High
- facebook folly, hhvm +1 morefolly::secureRandom will re-use a buffer between parent and child processes when fork() is called...CVE-2018-63377.5 High
- facebook osqueryAn issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third...CVE-2018-63367.8 High
- facebook hhvmA Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data....CVE-2018-63357.5 High
- facebook hhvmMultipart-file uploads call variables to be improperly registered in the global scope. In cases...CVE-2018-63349.8 Critical
- facebook hhvmA potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can...CVE-2018-63325.9 Medium
- facebook hhvmInfinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified...CVE-2016-68759.8 Critical
- facebook hhvmThe array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have...CVE-2016-68749.8 Critical
- facebook hhvmSelf recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified...CVE-2016-68739.8 Critical
- facebook hhvmInteger overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have...CVE-2016-68729.8 Critical
- facebook hhvmInteger overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified...CVE-2016-68719.8 Critical
- facebook hhvmOut-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order...CVE-2016-68709.8 Critical
- facebook hiphop virtual machineCross-site scripting (XSS) vulnerability in the WddxPacket::recursiveAddVar function in HHVM (aka...CVE-2014-97144.3 Medium
- facebook hiphop virtual machineThe HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM)...CVE-2014-62295.0 Medium
- facebook hiphop virtual machineInteger overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in...CVE-2014-62287.5 High
- facebook hiphop virtual machineThe mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop...CVE-2014-53865.0 Medium
- facebook hiphop virtual machineFacebook HipHop Virtual Machine (HHVM) before 3.1.0 does not drop supplemental group memberships...CVE-2014-22095.0 Medium
- facebook hiphop virtual machineCRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light...CVE-2014-22087.5 High
- facebook, facebook messenger +1 more** DISPUTED ** Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook...CVE-2014-6392Disputed4.3 Medium
- facebook photouploaderHeap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier...CVE-2008-5711Public exploitEPSS 32.7%9.3 High
- aurigma image uploader activex control, facebook, facebook photouploader +2 moreMultiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4...CVE-2008-0660Public exploitEPSS 37.8%9.3 High