Skip to contentMeta Platforms, Inc vulnerabilities
Newest
- meta platforms, inc sapling scmIn Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in...CVE-2026-1040267.8 High
- meta platforms, inc horizon osPrior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a...CVE-2026-921728.8 High
- meta platforms, inc horizon osPrior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a...CVE-2026-921739.1 Critical
- meta platforms, inc moxygenIn moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read...CVE-2026-848947.5 High
- llamastack llama stackLlama Stack could potentially allow for remote code executionCVE-2025-55178Fix available5.3 Medium
- meta platforms, inc executorchExecuTorch integer overflow vulnerability leads to code executionCVE-2025-549529.8 Critical
- meta platforms, inc executorchExecuTorch vulnerable to Heap-based Buffer OverflowCVE-2025-54951Fix available9.8 Critical
- meta platforms, inc executorchExecuTorch out-of-bounds access vulnerabilityCVE-2025-54950Fix available9.8 Critical
- meta platforms, inc executorchExecuTorch heap buffer overflow vulnerabilityCVE-2025-54949Fix available9.8 Critical
- meta platforms, inc executorchExecuTorch integer overflow vulnerabilityCVE-2025-30405Fix available9.8 Critical
- meta platforms, inc executorchExecuTorch integer overflow vulnerabilityCVE-2025-30404Fix available9.8 Critical
- meta platforms, inc executorchExecuTorch vulnerable to Heap-based Buffer Overflow attackCVE-2025-30402Fix available8.1 High
- facebook belowBelow has Incorrect Permission Assignment for Critical ResourceCVE-2025-27591Public exploitFix available6.8 Medium
- llamastack llama stackLlama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a...CVE-2024-50050Public exploit6.3 Medium
- facebook meta spark studio, meta platforms, inc spark studio +1 morePrior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside...CVE-2024-233477.8 High
- facebook lexicalAnchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross...CVE-2023-307926.1 Medium
- meta platforms, inc ray-ban® stories smart glasses, ray-ban stories rw4002 601\/71 50-22 firmware, stories rw4003 65582v 48-23 firmware +2 more +4 moreA logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture...CVE-2021-240465.3 Medium