Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: WhatsApp Component: Whatsapp Desktop Clear all filters
TI-2020-01816 CVE-2020-1889 · GHSA-27x9-jh87-vrp8

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could…

Priority MEDIUM 50

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04778 Published 2020-09-03 Fixed in 0.3.4932 CWE-265
TI-2019-08933 CVE-2019-11928 · GHSA-m3fj-55xx-478h

Cross-site scripting in Meta WhatsApp Desktop

Priority LOW 29

An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00995 Published 2020-09-03 Fixed in 0.3.4932 CWE-79