Skip to content

Whatsapp vulnerabilities

Products

Newest

facebook whatsapp for android, whatsapp for ios, whatsapp +2 more Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25... CVE-2026-23866 4.3 MediumMay 1, 2026
whatsapp, facebook whatsapp desktop for windows +1 more An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could... CVE-2026-23863 6.5 MediumMay 1, 2026
facebook whatsapp business for ios, whatsapp for ios, whatsapp +2 more +4 more Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73,... CVE-2025-55179 5.4 MediumNovember 18, 2025
facebook whatsapp business for ios, whatsapp for ios, meta platforms whatsapp +2 more +4 more Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to... CVE-2025-55177 In KEVPublic exploit EPSS 13.5% 5.4 MediumAugust 29, 2025
whatsapp, facebook whatsapp desktop for windows +1 more A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments... CVE-2025-30401 EPSS 21.0% 6.7 MediumApril 5, 2025
facebook whatsapp business for android, whatsapp business for ios, whatsapp desktop for mac +4 more +6 more A race condition in an event subsystem led to a heap use-after-free issue in established audio... CVE-2023-38538 5.0 MediumOctober 4, 2023
facebook whatsapp business for android, whatsapp business for ios, whatsapp desktop for mac +4 more +6 more A race condition in a network transport subsystem led to a heap use-after-free issue in... CVE-2023-38537 5.6 MediumOctober 4, 2023
whatsapp, facebook whatsapp business for android, whatsapp business for ios +2 more +4 more An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted... CVE-2022-27492 7.8 HighSeptember 23, 2022
whatsapp, facebook whatsapp business for android, whatsapp business for ios +3 more +5 more An integer overflow in WhatsApp could result in remote code execution in an established video call. CVE-2022-36934 Public exploit 9.8 CriticalSeptember 22, 2022
whatsapp Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly... CVE-2020-20096 6.5 MediumMarch 23, 2022
whatsapp, whatsapp business +1 more A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2,... CVE-2021-24043 9.1 CriticalFebruary 2, 2022
facebook whatsapp business for android, whatsapp business for ios, whatsapp desktop +4 more +6 more The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior... CVE-2021-24042 9.8 CriticalJanuary 4, 2022
facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 more A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and... CVE-2021-24041 9.8 CriticalDecember 7, 2021
facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 more A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13... CVE-2021-24035 9.1 CriticalJune 11, 2021
facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 more A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for... CVE-2021-24027 Public exploit 7.5 HighApril 6, 2021
facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +3 more +5 more A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for... CVE-2021-24026 9.8 CriticalApril 6, 2021
facebook whatsapp business for android, whatsapp for android, whatsapp +3 more +5 more A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for... CVE-2020-1910 7.8 HighFebruary 2, 2021
facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 more A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp... CVE-2020-1909 9.8 CriticalNovember 3, 2020
facebook whatsapp business for ios, whatsapp, whatsapp business +1 more +3 more Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior... CVE-2020-1908 4.6 MediumNovember 3, 2020
facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +4 more +6 more A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android... CVE-2020-1907 9.8 CriticalOctober 6, 2020
facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 more A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android... CVE-2020-1906 7.8 HighOctober 6, 2020
facebook whatsapp for android, whatsapp +1 more Media ContentProvider URIs used for opening attachments in other apps were generated sequentially... CVE-2020-1905 3.3 LowOctober 6, 2020
facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 more A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior... CVE-2020-1904 5.5 MediumOctober 6, 2020
facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 more An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and... CVE-2020-1903 5.5 MediumOctober 6, 2020
facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 more A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20... CVE-2020-1902 7.5 HighOctober 6, 2020
facebook whatsapp for ios, whatsapp +1 more Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have... CVE-2020-1901 5.3 MediumOctober 6, 2020
facebook whatsapp business for android, whatsapp business for iphone, whatsapp +3 more +5 more A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android... CVE-2020-1894 8.8 HighSeptember 3, 2020
facebook whatsapp business for android, whatsapp business for iphone, whatsapp +3 more +5 more A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17,... CVE-2020-1891 9.8 CriticalSeptember 3, 2020
facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 more A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for... CVE-2020-1890 7.5 HighSeptember 3, 2020
facebook whatsapp desktop, whatsapp desktop +1 more A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have... CVE-2020-1889 10.0 CriticalSeptember 3, 2020
facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 more A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android... CVE-2020-1886 8.8 HighSeptember 3, 2020
facebook whatsapp desktop, whatsapp desktop +1 more An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed... CVE-2019-11928 6.1 MediumSeptember 3, 2020
facebook whatsapp desktop, meta platforms whatsapp +1 more A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for... CVE-2019-18426 In KEVPublic exploit EPSS 67.9% 8.2 HighJanuary 21, 2020
whatsapp, whatsapp business, enterprise client +6 more +8 more A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4... CVE-2019-11931 Public exploit 7.8 HighNovember 14, 2019
facebook whatsapp for android, whatsapp, libpl droidsonroids gif project droidsonroids gif +2 more A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for... CVE-2019-11933 Public exploit 9.8 CriticalOctober 23, 2019
android-gif-drawable project android-gif-drawable, whatsapp +1 more android-gif-drawable Double Free vulnerability CVE-2019-11932 Public exploitFix available EPSS 44.5% 8.8 HighOctober 3, 2019
facebook whatsapp for android, whatsapp for ios, whatsapp +2 more An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an... CVE-2019-11927 7.8 HighSeptember 27, 2019
facebook whatsapp desktop, whatsapp +1 more An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows... CVE-2019-3571 5.3 MediumJuly 16, 2019
facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +4 more +6 more An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers.... CVE-2018-6350 9.8 CriticalJune 14, 2019
facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 more When receiving calls using WhatsApp for Android, a missing size check when parsing a sender... CVE-2018-6349 9.8 CriticalJune 14, 2019
facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 more When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for... CVE-2018-6339 9.8 CriticalJune 14, 2019
facebook whatsapp business for ios, whatsapp for ios, whatsapp +1 more +3 more When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided... CVE-2018-20655 9.8 CriticalJune 14, 2019
facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +5 more +7 more A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via... CVE-2019-3568 In KEV EPSS 30.1% 9.8 CriticalMay 14, 2019
facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 more A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual... CVE-2019-3566 5.9 MediumMay 10, 2019
facebook whatsapp for android, whatsapp for ios, whatsapp for windows phone +1 more +3 more A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is... CVE-2018-6344 7.5 HighDecember 31, 2018
whatsapp ** DISPUTED ** Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for... CVE-2017-8769 Disputed 4.6 MediumMay 18, 2017