Read the docs

Meta

Records192All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical74CVSS 9.0–10.0
CVSS high79CVSS 7.0–8.9

Exploited now

Meta records in CISA KEV
TI-2025-34861 Meta React Server Components Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2025-12-05TI-2025-34857 Meta Platforms WhatsApp Incorrect Authorization Vulnerability Priority HIGH 84KEV 2025-09-02TI-2023-23979 HTTP/2 Rapid Reset Attack Vulnerability Priority CRITICAL 90KEV 2023-10-10TI-2019-13416 WhatsApp Cross-Site Scripting Vulnerability Priority CRITICAL 93KEV 2022-05-23TI-2019-02633 WhatsApp VOIP Stack Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2022-04-19

Components

Products in the NVD configurations · select one to filter the records
Hhvm 40 records MEDIUM Hermes 20 records MEDIUM Thrift 9 records MEDIUM Hiphop Virtual Machine 7 records MEDIUM Proxygen 7 records CRITICAL React 6 records CRITICAL Facebook 4 records HIGH Zstandard 4 records MEDIUM

Records

4 records in Facebook · all components

TI-2008-00628 CVE-2008-0660 · GHSA-fffx-94h7-8772

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control…

Priority HIGH 67

Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remot…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.37762 Published 2008-02-08 No fix listed CWE-119
TI-2021-06509 CVE-2021-24217 · GHSA-w6px-4fhm-xxgc

Facebook for WordPress < 3.0.0 - PHP Object Injection with POP Chain

Priority MEDIUM 41

The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injection vulnerability.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0352 Published 2021-04-12 Fixed in 3.0.0 CWE-502
TI-2014-05258 CVE-2014-6392 · GHSA-gr4p-p93w-7rc9

Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improp…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00942 Published 2014-09-15 No fix listed CWE-79
Open these records in search →