Browse CVEs

MEDIUM 6.5 CVE-2026-23863 An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embed… Whatsapp 2.3000.1032164386.258709+ Fix from $1,6002026-05-01 MEDIUM 5.4 CVE-2025-55179 Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac… Whatsapp 2.25.23.73 / 2.25.23.82+ Fix from $1,6002025-11-18 MEDIUM 5.4 CVE-2025-55177 KEV Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, a… Whatsapp 2.25.21.73 / 2.25.21.78+ Fix from $1,6002025-08-29 MEDIUM 6.7 CVE-2025-30401EPSS 22% A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file opening h… Whatsapp 2.2450.6+ Fix from $1,6002025-04-05 MEDIUM 5.0 CVE-2023-38538 A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app terminatio… Whatsapp 2.2320.2+ Fix from $1,6002023-10-04 MEDIUM 5.6 CVE-2023-38537 A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that cou… Whatsapp 2.2338.12+ Fix from $1,6002023-10-04 HIGH 7.8 CVE-2022-27492 An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file. Whatsapp 2.22.15.9 / 2.22.16.2+ Fix from $1,9502022-09-23 CRITICAL 9.8 CVE-2022-36934 An integer overflow in WhatsApp could result in remote code execution in an established video call. Whatsapp 2.22.16.12+ Fix from $2,3002022-09-22 MEDIUM 6.5 CVE-2020-20096 Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in U… Whatsapp after 2.19.222 Fix from $1,6002022-03-23 CRITICAL 9.1 CVE-2021-24043 A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS … Whatsapp Mitigation only Fix from $2,3002022-02-02 CRITICAL 9.8 CVE-2021-24042 The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, W… Whatsapp 2.21.23 / 2.21.230+ Fix from $2,3002022-01-04 CRITICAL 9.8 CVE-2021-24041 A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowe… Whatsapp 2.21.22.7+ Fix from $2,3002021-12-07 CRITICAL 9.1 CVE-2021-24035 A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could hav… Whatsapp 2.21.8.13+ Fix from $2,3002021-06-11 CRITICAL 9.8 CVE-2021-24026 A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android … Whatsapp 2.21.3 / 2.21.32+ Fix from $2,3002021-04-06 HIGH 7.5 CVE-2021-24027 A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with… Whatsapp 2.21.4.18+ Fix from $1,9502021-04-06 HIGH 7.8 CVE-2020-1910EPSS 5% A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bo… Whatsapp 2.21.1.13+ Fix from $1,9502021-02-02 CRITICAL 9.8 CVE-2020-1909 A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in … Whatsapp 2.20.111+ Fix from $2,3002020-11-03 CRITICAL 9.8 CVE-2020-1907 A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.… Whatsapp 2.20.90 / 2.20.196.12+ Fix from $2,3002020-10-06 HIGH 7.8 CVE-2020-1906 A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-of-bounds … Whatsapp 2.20.46 / 2.20.130+ Fix from $1,9502020-10-06 MEDIUM 5.5 CVE-2020-1904 A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traver… Whatsapp 2.20.61+ Fix from $1,6002020-10-06 HIGH 7.5 CVE-2020-1902 A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from… Whatsapp after 2.20.140 Fix from $1,9502020-10-06 MEDIUM 5.5 CVE-2020-1903 An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could ha… Whatsapp 2.20.61+ Fix from $1,6002020-10-06 MEDIUM 5.3 CVE-2020-1901 Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while processing t… Whatsapp 2.20.91.4+ Fix from $1,6002020-10-06 CRITICAL 10.0 CVE-2020-1889 A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of p… Whatsapp Desktop 0.3.4932+ Fix from $2,3002020-09-03 CRITICAL 9.8 CVE-2020-1891 A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp fo… Whatsapp 2.20.7 / 2.20.17+ Fix from $2,3002020-09-03 HIGH 8.8 CVE-2020-1886 A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds wr… Whatsapp 2.20.2 / 2.20.11+ Fix from $1,9502020-09-03 HIGH 8.8 CVE-2020-1894 A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20… Whatsapp 2.20.20 / 2.20.30+ Fix from $1,9502020-09-03 HIGH 7.5 CVE-2020-1890 A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient o… Whatsapp 2.20.2 / 2.20.11+ Fix from $1,9502020-09-03 MEDIUM 6.1 CVE-2019-11928 An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a spec… Whatsapp Desktop 0.3.4932+ Fix from $1,6002020-09-03 HIGH 8.2 CVE-2019-18426 KEVEPSS 68% A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scrip… Whatsapp 0.3.9309 / 2.20.10+ Fix from $1,9502020-01-21