Read the docs

WhatsApp

Records46All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

WhatsApp records in CISA KEV
TI-2025-34857 Meta Platforms WhatsApp Incorrect Authorization Vulnerability Priority HIGH 84KEV 2025-09-02TI-2019-13416 WhatsApp Cross-Site Scripting Vulnerability Priority CRITICAL 93KEV 2022-05-23TI-2019-02633 WhatsApp VOIP Stack Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2022-04-19

Components

Products in the NVD configurations · select one to filter the records
Whatsapp 44 records CRITICAL Whatsapp Business 27 records CRITICAL Whatsapp Desktop 2 records MEDIUM Whatsapp Enterprise Client 1 record LOW

Records

2 records in Whatsapp Desktop · all components

TI-2020-01816 CVE-2020-1889 · GHSA-27x9-jh87-vrp8

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could…

Priority MEDIUM 50

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04778 Published 2020-09-03 Fixed in 0.3.4932 CWE-265
TI-2019-08933 CVE-2019-11928 · GHSA-m3fj-55xx-478h

Cross-site scripting in Meta WhatsApp Desktop

Priority LOW 29

An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00995 Published 2020-09-03 Fixed in 0.3.4932 CWE-79
Open these records in search →