Skip to content

Signal vulnerabilities

Products

Newest

signal ringrtc In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can... CVE-2026-113380 9.3 CriticalOctober 20, 2026
signal app, signal +1 more Signal App Biometric Authentication missing critical step in authentication CVE-2025-5715 1.0 LowJune 6, 2025
signal signal-desktop Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially... CVE-2023-24069 Disputed 3.3 LowJanuary 23, 2023
signal signal-desktop Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify... CVE-2023-24068 Disputed 7.8 HighJanuary 23, 2023
signal The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders... CVE-2022-28345 7.5 HighApril 15, 2022
signal private messenger, signal +1 more Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non... CVE-2020-5753 5.3 MediumMay 20, 2020
signal signal-desktop Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a... CVE-2019-19954 7.3 HighDecember 24, 2019
signal private messenger The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a... CVE-2019-17191 7.5 HighOctober 5, 2019
signal private messenger ** DISPUTED ** The WebRTC component in the Signal Private Messenger application through 4.47.7... CVE-2019-17192 Disputed 9.8 CriticalOctober 5, 2019
signal private messenger, signal-desktop +1 more Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger... CVE-2019-9970 6.5 MediumMarch 24, 2019
signal private messenger Signal Messenger for Android 4.24.8 may expose private information when using "disappearing... CVE-2018-3988 3.3 LowDecember 10, 2018
signal The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29... CVE-2018-16132 8.6 HighAugust 29, 2018
signal signal-desktop Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage. CVE-2018-14023 4.0 MediumAugust 20, 2018
signal signal-desktop Open Whisper Signal (aka Signal-Desktop) through 1.10.1 allows XSS via a resource location... CVE-2018-11101 6.1 MediumMay 17, 2018
signal signal-desktop js/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) before 1.10.1 allows XSS via... CVE-2018-10994 6.1 MediumMay 14, 2018
signal The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass... CVE-2018-9840 6.8 MediumApril 10, 2018