target entity

Meta Platforms

3 source-linked records in the current knowledge graph.

Sep 2, 2025high

CVE-2025-55177: Meta Platforms WhatsApp Incorrect Authorization Vulnerability

Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2025-55177EPSS 4.1%Meta PlatformsWhatsApp

CISA KEV ↗ · unattributed attribution

May 23, 2022high

CVE-2019-18426: WhatsApp Cross-Site Scripting Vulnerability

A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading. Required action: Apply updates per vendor instructions.

CVE-2019-18426EPSS 67.9%Meta PlatformsWhatsApp

CISA KEV ↗ · unattributed attribution

Apr 19, 2022high

CVE-2019-3568: WhatsApp VOIP Stack Buffer Overflow Vulnerability

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. Required action: Apply updates per vendor instructions.

CVE-2019-3568EPSS 39.2%Meta PlatformsWhatsApp

CISA KEV ↗ · unattributed attribution