Skip to contentFacebook vulnerabilities
Newest
- facebook hermesIt was possible to trigger an infinite recursion condition in the error handler when Hermes...CVE-2022-278107.5 High
- whatsapp, facebook whatsapp business for android, whatsapp business for ios +2 more +4 moreAn integer underflow in WhatsApp could have caused remote code execution when receiving a crafted...CVE-2022-274927.8 High
- whatsapp, facebook whatsapp business for android, whatsapp business for ios +3 more +5 moreAn integer overflow in WhatsApp could result in remote code execution in an established video call.CVE-2022-36934Public exploit9.8 Critical
- facebook instagramInstagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly...CVE-2020-200946.5 Medium
- facebook messengerThe Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user...CVE-2020-20093Public exploit6.5 Medium
- facebook hermesAccess of Resource Using Incompatible Type in HermesCVE-2021-24044Fix available9.8 Critical
- facebook whatsapp business for android, whatsapp business for ios, whatsapp desktop +4 more +6 moreThe calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior...CVE-2021-240429.8 Critical
- facebook hermesA type confusion vulnerability could be triggered when resolving the "typeof" unary operator in...CVE-2021-240459.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and...CVE-2021-240419.8 Critical
- facebook hhvmHHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One...CVE-2019-35568.1 High
- facebook parlaiDeserialization of Untrusted Data in parlaiCVE-2021-39207Fix available8.4 High
- facebook parlaiDeserialization of Untrusted Data in ParlAICVE-2021-24040Public exploitFix availableEPSS 17.4%9.8 Critical
- facebook oculus desktop, oculus desktop +1 moreDue to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a...CVE-2021-240387.8 High
- facebook folly, hhvm +1 morePassing an attacker controlled size when creating an IOBuf could cause integer overflow, leading...CVE-2021-240369.8 Critical
- facebook hermesUse After Free in HermesCVE-2021-24037Fix available9.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13...CVE-2021-240359.1 Critical
- facebook react-nativeRegular expression denial of service in react-nativeCVE-2020-1920Fix available7.5 High
- facebook thriftAn invalid free in Thrift's table-based serialization can cause the application to crash or...CVE-2021-240289.8 Critical
- facebook, unknown facebook for wordpress +1 moreFacebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings DeletionCVE-2021-242188.8 High
- facebook, unknown facebook for wordpress +1 moreFacebook for WordPress < 3.0.0 - PHP Object Injection with POP ChainCVE-2021-242178.1 High
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for...CVE-2021-24027Public exploit7.5 High
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +3 more +5 moreA missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for...CVE-2021-240269.8 Critical
- facebook mvfst, proxygen +1 moreA packet of death scenario is possible in mvfst via a specially crafted message during a QUIC...CVE-2021-240297.5 High
- facebook hhvmWhen unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of...CVE-2020-19009.8 Critical
- facebook hhvmThe unserialize() function supported a type code, "S", which was meant to be supported only for...CVE-2020-18997.5 High
- facebook hhvmThe fb_unserialize function did not impose a depth limit for nested deserialization. That meant a...CVE-2020-18987.5 High
- facebook gameroomThe fbgames protocol handler registered as part of Facebook Gameroom does not properly quote...CVE-2021-240309.8 Critical
- facebook hhvmDue to incorrect string size calculations inside the preg_quote function, a large input string...CVE-2021-240259.8 Critical
- facebook hhvmIn the crypt function, we attempt to null terminate a buffer using the size of the input salt...CVE-2020-19217.5 High
- facebook hhvmIncorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the...CVE-2020-19197.5 High
- facebook hhvmIn-memory file operations (ie: using fopen on a data URI) did not properly restrict negative...CVE-2020-19187.5 High
- facebook hhvmxbuf_format_converter, used as part of exif_read_data, was appending a terminating null character...CVE-2020-19179.8 Critical
- facebook hhvmAn incorrect size calculation in ldap_escape may lead to an integer overflow when overly long...CVE-2020-19169.8 Critical
- facebook react-dev-utilsreact-dev-utils OS Command Injection in function `getProcessForPort`CVE-2021-24033Fix available5.6 Medium
- facebook zstandardBeginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the...CVE-2021-24032Fix available4.7 Medium
- facebook zstandardIn the Zstandard command-line utility prior to v1.4.1, output files were created with default...CVE-2021-24031Fix available5.5 Medium
- facebook whatsapp business for android, whatsapp for android, whatsapp +3 more +5 moreA missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for...CVE-2020-19107.8 High
- facebook hermesA stack overflow vulnerability in Facebook Hermes ‘builtin apply’ prior to commit...CVE-2020-18969.8 Critical
- facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 moreA use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp...CVE-2020-19099.8 Critical
- facebook whatsapp business for ios, whatsapp, whatsapp business +1 more +3 moreImproper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior...CVE-2020-19084.6 Medium
- facebook hermesOut-of-bounds Read in Facebook HermesCVE-2020-1915Fix available7.5 High
- facebook hermesAlways-Incorrect Control Flow Implementation in Facebook HermesCVE-2020-1914Fix available9.8 Critical
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +4 more +6 moreA stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android...CVE-2020-19079.8 Critical
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android...CVE-2020-19067.8 High
- facebook whatsapp for android, whatsapp +1 moreMedia ContentProvider URIs used for opening attachments in other apps were generated sequentially...CVE-2020-19053.3 Low
- facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 moreA path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior...CVE-2020-19045.5 Medium
- facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 moreAn issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and...CVE-2020-19035.5 Medium
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20...CVE-2020-19027.5 High
- facebook whatsapp for ios, whatsapp +1 moreReceiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have...CVE-2020-19015.3 Medium
- facebook hermesSigned to Unsigned Conversion Error in Facebook HermesCVE-2020-1913Fix available8.1 High
- Show moreLoading…