PM
Product
Private Messenger
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 3Low 0
Watch
Add Private Messenger to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17192 | 9.8 | Oct 5 | The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a callee chooses to answer a call, which… Affected: through 4.47.7 |
| CVE-2019-17191 | 7.5 | Oct 5 | The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user interaction, via a connect message Affected: before 4.47.7 |
| CVE-2019-9970 | 6.5 | Mar 24 | Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerable to an IDN homograph attack when… Affected: through 4.35.3 |
| CVE-2020-5753 | 5.3 | May 20 | Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to… Affected: through 4.59.0 |
| CVE-2018-3988 | 4.7 | Dec 10 | Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attach file" menu, then… Affected: 4.24.8 |
Showing 5