Read the docs

WhatsApp

Records46All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

WhatsApp records in CISA KEV
TI-2025-34857 Meta Platforms WhatsApp Incorrect Authorization Vulnerability Priority HIGH 84KEV 2025-09-02TI-2019-13416 WhatsApp Cross-Site Scripting Vulnerability Priority CRITICAL 93KEV 2022-05-23TI-2019-02633 WhatsApp VOIP Stack Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2022-04-19

Components

Products in the NVD configurations · select one to filter the records
Whatsapp 44 records CRITICAL Whatsapp Business 27 records CRITICAL Whatsapp Desktop 2 records MEDIUM Whatsapp Enterprise Client 1 record LOW

Records

1 record in Whatsapp Enterprise Client · all components

TI-2019-08936 CVE-2019-11931 · GHSA-6c69-f792-7pq7

Stack-based buffer overflow in Meta WhatsApp for Android

Priority LOW 36

A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01212 Published 2019-11-14 Fixed in 2.19.274, 2.19.100 +2 CWE-121
Open these records in search →