Vulnerability index

Browse CVEs

41 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Whatsapp MEDIUM 6.5
CVE-2026-23863

An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embed…

Fix: 2.3000.1032164386.258709+
Fix from $1,600 2026-05-01
Whatsapp MEDIUM 5.4
CVE-2025-55179

Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac…

Fix: 2.25.23.73 / 2.25.23.82+
Fix from $1,600 2025-11-18
Whatsapp MEDIUM 5.4
CVE-2025-55177 KEV

Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, a…

Fix: 2.25.21.73 / 2.25.21.78+
Fix from $1,600 2025-08-29
Whatsapp MEDIUM 6.7
CVE-2025-30401EPSS 22%

A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file opening h…

Fix: 2.2450.6+
Fix from $1,600 2025-04-05
Whatsapp MEDIUM 5.0
CVE-2023-38538

A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app terminatio…

Fix: 2.2320.2+
Fix from $1,600 2023-10-04
Whatsapp MEDIUM 5.6
CVE-2023-38537

A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that cou…

Fix: 2.2338.12+
Fix from $1,600 2023-10-04
Whatsapp HIGH 7.8
CVE-2022-27492

An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file.

Fix: 2.22.15.9 / 2.22.16.2+
Fix from $1,950 2022-09-23
Whatsapp CRITICAL 9.8
CVE-2022-36934

An integer overflow in WhatsApp could result in remote code execution in an established video call.

Fix: 2.22.16.12+
Fix from $2,300 2022-09-22
Whatsapp MEDIUM 6.5
CVE-2020-20096

Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in U…

Fix: after 2.19.222
Fix from $1,600 2022-03-23
Whatsapp CRITICAL 9.1
CVE-2021-24043

A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS …

Mitigation only
Fix from $2,300 2022-02-02
Whatsapp CRITICAL 9.8
CVE-2021-24042

The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, W…

Fix: 2.21.23 / 2.21.230+
Fix from $2,300 2022-01-04
Whatsapp CRITICAL 9.8
CVE-2021-24041

A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowe…

Fix: 2.21.22.7+
Fix from $2,300 2021-12-07
Whatsapp CRITICAL 9.1
CVE-2021-24035

A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could hav…

Fix: 2.21.8.13+
Fix from $2,300 2021-06-11
Whatsapp CRITICAL 9.8
CVE-2021-24026

A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android …

Fix: 2.21.3 / 2.21.32+
Fix from $2,300 2021-04-06
Whatsapp HIGH 7.5
CVE-2021-24027

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with…

Fix: 2.21.4.18+
Fix from $1,950 2021-04-06
Whatsapp HIGH 7.8
CVE-2020-1910EPSS 5%

A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bo…

Fix: 2.21.1.13+
Fix from $1,950 2021-02-02
Whatsapp CRITICAL 9.8
CVE-2020-1909

A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in …

Fix: 2.20.111+
Fix from $2,300 2020-11-03
Whatsapp CRITICAL 9.8
CVE-2020-1907

A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.…

Fix: 2.20.90 / 2.20.196.12+
Fix from $2,300 2020-10-06
Whatsapp HIGH 7.8
CVE-2020-1906

A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-of-bounds …

Fix: 2.20.46 / 2.20.130+
Fix from $1,950 2020-10-06
Whatsapp MEDIUM 5.5
CVE-2020-1904

A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traver…

Fix: 2.20.61+
Fix from $1,600 2020-10-06
Whatsapp HIGH 7.5
CVE-2020-1902

A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from…

Fix: after 2.20.140
Fix from $1,950 2020-10-06
Whatsapp MEDIUM 5.5
CVE-2020-1903

An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could ha…

Fix: 2.20.61+
Fix from $1,600 2020-10-06
Whatsapp MEDIUM 5.3
CVE-2020-1901

Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while processing t…

Fix: 2.20.91.4+
Fix from $1,600 2020-10-06
Whatsapp Desktop CRITICAL 10.0
CVE-2020-1889

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of p…

Fix: 0.3.4932+
Fix from $2,300 2020-09-03
Whatsapp CRITICAL 9.8
CVE-2020-1891

A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp fo…

Fix: 2.20.7 / 2.20.17+
Fix from $2,300 2020-09-03
Whatsapp HIGH 8.8
CVE-2020-1886

A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds wr…

Fix: 2.20.2 / 2.20.11+
Fix from $1,950 2020-09-03
Whatsapp HIGH 8.8
CVE-2020-1894

A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20…

Fix: 2.20.20 / 2.20.30+
Fix from $1,950 2020-09-03
Whatsapp HIGH 7.5
CVE-2020-1890

A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient o…

Fix: 2.20.2 / 2.20.11+
Fix from $1,950 2020-09-03
Whatsapp Desktop MEDIUM 6.1
CVE-2019-11928

An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a spec…

Fix: 0.3.4932+
Fix from $1,600 2020-09-03
Whatsapp HIGH 8.2
CVE-2019-18426 KEVEPSS 68%

A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scrip…

Fix: 0.3.9309 / 2.20.10+
Fix from $1,950 2020-01-21