Login Request a demo
SI
Product
Signal
by Signal · last CVE Jun 6, 2025
5
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Signal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-16132
8.6
1%
Aug 29
The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating…
Affected: through 2.29.0
CVE-2022-28345
7.5
2%
Apr 15
The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection
Affected: before 5.34
CVE-2018-9840
6.8
0%
Apr 10
The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via certain rapid sequences of actions that include app…
Affected: before 2.23.2
CVE-2025-5715
6.4
0%
Jun 6
Signal App Biometric Authentication missing critical step in authentication
Affected: 7.41.4
CVE-2020-5753
5.3
1%
May 20
Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to…
Affected: through 3.8.1.5
Showing 5