Read the docs

Meta

Records192All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical74CVSS 9.0–10.0
CVSS high79CVSS 7.0–8.9

Exploited now

Meta records in CISA KEV
TI-2025-34861 Meta React Server Components Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2025-12-05TI-2025-34857 Meta Platforms WhatsApp Incorrect Authorization Vulnerability Priority HIGH 84KEV 2025-09-02TI-2023-23979 HTTP/2 Rapid Reset Attack Vulnerability Priority CRITICAL 90KEV 2023-10-10TI-2019-13416 WhatsApp Cross-Site Scripting Vulnerability Priority CRITICAL 93KEV 2022-05-23TI-2019-02633 WhatsApp VOIP Stack Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2022-04-19

Components

Products in the NVD configurations · select one to filter the records
Hhvm 40 records MEDIUM Hermes 20 records MEDIUM Thrift 9 records MEDIUM Hiphop Virtual Machine 7 records MEDIUM Proxygen 7 records CRITICAL React 6 records CRITICAL Facebook 4 records HIGH Zstandard 4 records MEDIUM

Records

9 records in Thrift · all components

TI-2019-02630 CVE-2019-3565 · GHSA-j98f-h9mx-xrxq

Improper handling of exceptional conditions in Meta Facebook Thrift

Priority LOW 38

Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02813 Published 2019-05-06 Fixed in v2019.05.06.00 CWE-834
TI-2019-08943 CVE-2019-11938 · GHSA-hr4p-8hm2-w85x

Resource allocation without limits in Meta Facebook Thrift

Priority LOW 37

Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02252 Published 2020-03-10 Fixed in v2019.12.09.00 CWE-770
TI-2019-02629 CVE-2019-3564 · GHSA-x4rg-4545-4w7w

Improper handling of exceptional conditions in Meta Facebook Thrift

Priority LOW 37

Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01994 Published 2019-05-06 Fixed in v2019.03.04.00, 0.31.1-0.20190225164308-c461c1bd1a3e CWE-834
TI-2019-02619 CVE-2019-3553 · GHSA-859v-9mcv-7rw3

Resource allocation without limits in Meta Facebook Thrift

Priority LOW 37

C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02128 Published 2020-03-10 Fixed in v2020.02.03.00 CWE-770
TI-2019-08944 CVE-2019-11939 · GHSA-w3r9-r9w7-8h48

Resource allocation without limits in Meta Facebook Thrift

Priority LOW 36

Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01557 Published 2020-03-18 Partial fix · v2020.03.16.00, 0.31.1-0.20200311080807-483ed864d69f CWE-770
Open these records in search →