Wireapp vulnerabilities

Products

• Wire-ios 9
• Wire-webapp 8
• Wire-server 7
• Wire-avs 2

Newest

• wireapp wire-ios wire-ios has Persistent Remote DoS via Integer Underflow CVE-2026-35049 6.5 MediumJune 2, 2026
• wireapp wire-ios wire-ios accidentally logs message contents CVE-2025-49846 4.1 MediumJuly 3, 2025
• wire wire-webapp wire-webapp has no database deletion on client logout CVE-2025-48066 6.0 MediumMay 22, 2025
• wireapp wire-webapp wire-webapp Has Insufficient Session Invalidation after User Logout CVE-2025-48061 5.6 MediumMay 22, 2025
• wireapp wire-avs, wire audio\, video\, and signaling +1 more wire-avs remote format string vulnerability CVE-2023-48221 7.3 HighNovember 20, 2023
• wire, wireapp wire-server +1 more wire-server vulnerable to unauthorized removal of Bots from Conversations CVE-2023-22737 6.5 MediumJanuary 27, 2023
• wire wire-webapp wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering CVE-2022-39380 5.3 MediumJanuary 27, 2023
• wire server, wireapp wire-server +1 more Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation CVE-2022-31122 9.8 CriticalOctober 18, 2022
• wire wire-webapp Cross Site Scripting in Wire Messages CVE-2022-29168 9.6 CriticalJune 25, 2022
• wire, wireapp wire-ios +1 more DoS vulnerability: Invalid Accent Colors CVE-2022-31009 5.7 MediumJune 23, 2022
• wire wire-webapp Cross Site Scripting in Wire Webapp CVE-2022-24799 9.6 CriticalApril 20, 2022
• wire wire-server DoS vulnerabiliity in wire-server json parser CVE-2021-41119 5.3 MediumApril 13, 2022
• wire wire-server Improper Verification of Cryptographic Signature in wire-server CVE-2022-23610 9.1 CriticalMarch 16, 2022
• wire, wire wire-ios-transport, wireapp wire-ios +2 more DoS vulnerability: Malformed Resource Identifiers CVE-2022-23625 6.5 MediumMarch 11, 2022
• wireapp wire-avs, wire wire-audio video signaling +1 more Use of Externally-Controlled Format String in wire-avs CVE-2021-41193 Fix available 9.8 CriticalMarch 1, 2022
• wire wire-webapp Expired Ephemeral Messages not reliably removed in wire-webapp CVE-2022-23605 4.4 MediumFebruary 4, 2022
• wire wire-server Account takeover when having only access to a user's short lived token in wire-server CVE-2021-41100 7.4 HighOctober 4, 2021
• wire, wireapp wire-ios +1 more Mandatory encryption at rest can be bypassed (UI) in Wire app CVE-2021-41094 4.2 MediumOctober 4, 2021
• wire, wireapp wire-ios +1 more Account takeover when having only access to a user's short lived token CVE-2021-41093 7.4 HighOctober 4, 2021
• wire server, wireapp wire-server +1 more CORS `Access-Control-Allow-Origin` settings are too lenient CVE-2021-41101 5.7 MediumSeptember 30, 2021
• wire, wireapp wire-ios-transport +1 more Certificate pinning is not enforced on the web socket connection CVE-2021-32755 5.4 MediumJuly 13, 2021
• wire wire-webapp XSS through createObjectURL CVE-2021-32683 8.8 HighJune 15, 2021
• wire restund Unsafe loopback forwarding interface in Restund CVE-2021-21382 8.6 HighJune 11, 2021
• wire, wireapp wire-ios +1 more Asset DoS vulnerability CVE-2021-32666 6.5 MediumJune 3, 2021
• wire, wireapp wire-ios +1 more Verified groups not reliable CVE-2021-32665 8.8 HighJune 3, 2021
• wire wire-webapp Entering code in App Lock modal sends input to conversation CVE-2021-21400 7.1 HighApril 2, 2021
• wire server, wireapp wire-server +1 more Bulk list client endpoint exposes too much metadata about a client CVE-2021-21396 6.5 MediumMarch 26, 2021
• wire, wireapp wire-ios +1 more Video feed was captured while user has disabled video CVE-2021-21301 2.6 LowFebruary 11, 2021
• wire, wireapp wire-desktop +1 more Insecure use of shell.openExternal in Wire CVE-2020-15258 8.0 HighOctober 16, 2020