MP
Vendor
Meta Platforms, Inc
11
CVEs
0
On KEV
3
New 30D
Products
MH9.1
Meta Horizon OS
Meta Platforms, Inc
2 CVEs0 on KEV2 new
SS7.8
Sapling SCM
Meta Platforms, Inc
1 CVEs0 on KEV1 new
EX9.8
ExecuTorch
Meta Platforms, Inc
6 CVEs0 on KEV0 new
LS5.3
Llama Stack
Meta Platforms, Inc
1 CVEs0 on KEV0 new
MO7.5
moxygen
Meta Platforms, Inc
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104026 | SS Sapling SCM Meta Platforms, Inc | 7.8 | Oct 2 | In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs |
| CVE-2026-92172 | MH Meta Horizon OS Meta Platforms, Inc | 8.8 | Sep 30 | Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary… |
| CVE-2026-92173 | MH Meta Horizon OS Meta Platforms, Inc | 9.1 | Sep 30 | Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell CallerIdentity to an… |
| CVE-2026-84894 | MO moxygen Meta Platforms, Inc | 7.5 | Sep 28 | In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's… |
| CVE-2025-55178 | LS Llama Stack Meta Platforms, Inc | 5.3 | Sep 24 | Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution |
| CVE-2025-54952 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in code execution or… |
| CVE-2025-54951 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable… |
| CVE-2025-54950 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects |
| CVE-2025-54949 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects |
| CVE-2025-30405 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution… |
| CVE-2025-30404 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects |