Meta Platforms
Vulnerability activity for Meta Platforms: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 5.4MediumAug 29, 2025Meta Platforms WhatsApp Auth bypass / access controlCVE-2025-55177Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.Added to KEV Sep 2, 2025 · 3 days after publicationExploited13% likelyExploit code
- 8.2HighJan 21, 2020Meta Platforms WhatsApp XSSCVE-2019-18426A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.Added to KEV May 23, 2022 · 852 days after publicationExploited68% likelyExploit codeExploit-DB
- 9.8CriticalMay 14, 2019Meta Platforms WhatsApp Memory corruptionCVE-2019-3568A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.Added to KEV Apr 19, 2022 · 1,070 days after publicationExploited30% likely
Recent
- 7.5HighSep 28, 2026Meta Platforms moxygen Memory corruptionCVE-2026-84894In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's WebTransport API. A remote peer can trigger the stale use by opening a data stream that names an unknown track alias and carries the FIN in the same write.
- 5.4MediumAug 29, 2025Meta Platforms WhatsApp Auth bypass / access controlCVE-2025-55177Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.Exploited13% likelyExploit code
- 8.2HighJan 21, 2020Meta Platforms WhatsApp XSSCVE-2019-18426A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.Exploited68% likelyExploit codeExploit-DB
- 9.8CriticalMay 14, 2019Meta Platforms WhatsApp Memory corruptionCVE-2019-3568A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.Exploited30% likely
Top products
- moxygen1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.