WH
Product
Whatsapp
On CISA KEVExploited in the wild
44
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 13Medium 15Low 1
Watch
Add Whatsapp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-18426 In wildKEV | 8.2 | Jan 21 | WhatsApp Cross-Site Scripting Vulnerability Affected: before 0.3.9309; before 2.20.10 |
| CVE-2020-1894 | 8.8 | Sep 3 | A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for… Affected: before 2.20.30; before 2.20.35 |
| CVE-2020-1886 | 8.8 | Sep 3 | A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted… Affected: before 2.20.11 |
| CVE-2019-11932 | 8.8 | Oct 3 | A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version… Affected: before 2.19.244 |
| CVE-2022-27492 | 7.8 | Sep 23 | An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file Affected: before 2.22.15.9; before 2.22.16.2 |
| CVE-2020-1910 | 7.8 | Feb 2 | A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read and write if a user… Affected: before 2.21.1.13 |
| CVE-2020-1906 | 7.8 | Oct 6 | A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-of-bounds write when processing… Affected: before 2.20.130 |
| CVE-2019-11931 | 7.8 | Nov 14 | A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file to a WhatsApp user Affected: through 2.18.368; before 2.19.100; before 2.19.274 |
| CVE-2019-11927 | 7.8 | Sep 27 | An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images Affected: before 2.9.143; before 2.19.100 |
| CVE-2021-24027 | 7.5 | Apr 6 | A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s… Affected: before 2.21.4.18 |
| CVE-2020-1902 | 7.5 | Oct 6 | A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could… Affected: 2.20.108 through 2.20.140 |
| CVE-2020-1890 | 7.5 | Sep 3 | A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing… Affected: before 2.20.11 |
| CVE-2018-6344 | 7.5 | Dec 31 | A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established Affected: before 2.18.93; before 2.18.172; before 2.18.293 |
Showing 13