Записи WhatsApp
46 опубликованных записей вендора whatsapp.
Профиль для исследователя
- Попали в KEV
- 3 · 6,5 %
- С эксплойтом
- 3 · 6,5 %
- Pre-auth RCE
- 7
- С записью об исправлении
- 17,4 %
- Медиана: публикация → KEV
- 853 дн.
Повторяющиеся классы
- CWE-122 Heap-based Buffer Overflow6
- CWE-787 Out-of-bounds Write5
- CWE-121 Stack-based Buffer Overflow4
- CWE-125 Out-of-bounds Read2
- CWE-23 Relative Path Traversal2
- CWE-400 Uncontrolled Resource Consumption2
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
46 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
82Срочно | CVE-2019-18426Готовый эксплойт | A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-swhatsapp · whatsapp · CWE-79 | Высокая8,2 | KEV | 67,8 % | 21 янв. 2020 г. |
78На этой неделе | CVE-2019-3568Готовый эксплойт | A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a whatsapp · whatsapp · CWE-122 | Критическая9,8 | KEV | 30,0 % | 14 мая 2019 г. |
55В плане | CVE-2025-55177Готовый эксплойт | Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25whatsapp · whatsapp · CWE-863 | Средняя5,4 | KEV | 13,5 % | 29 авг. 2025 г. |
48В плане | CVE-2019-11932Proof of concept | A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in Wwhatsapp · whatsapp · CWE-415 | Высокая8,8 | — | 44,5 % | 3 окт. 2019 г. |
41В плане | CVE-2020-1889Эксплойта нет | A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalawhatsapp · whatsapp desktop · CWE-265 | Критическая10,0 | — | 4,7 % | 3 сент. 2020 г. |
40В плане | CVE-2019-11933Proof of concept | A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remwhatsapp · whatsapp · CWE-119 | Критическая9,8 | — | 4,1 % | 23 окт. 2019 г. |
40В плане | CVE-2022-36934Proof of concept | An integer overflow in WhatsApp could result in remote code execution in an established video call.whatsapp · whatsapp · CWE-122 | Критическая9,8 | — | 2,4 % | 22 сент. 2022 г. |
40В плане | CVE-2020-1909Эксплойта нет | A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have reswhatsapp · whatsapp · CWE-416 | Критическая9,8 | — | 2,2 % | 3 нояб. 2020 г. |
40В плане | CVE-2018-6349Эксплойта нет | When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overflwhatsapp · whatsapp · CWE-121 | Критическая9,8 | — | 2,2 % | 14 июн. 2019 г. |
40В плане | CVE-2018-20655Эксплойта нет | When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow.whatsapp · whatsapp · CWE-121 | Критическая9,8 | — | 2,1 % | 14 июн. 2019 г. |
40В плане | CVE-2020-1907Эксплойта нет | A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior whatsapp · whatsapp · CWE-787 | Критическая9,8 | — | 1,8 % | 6 окт. 2020 г. |
40В плане | CVE-2018-6350Эксплойта нет | An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers.whatsapp · whatsapp · CWE-125 | Критическая9,8 | — | 1,6 % | 14 июн. 2019 г. |
39Наблюдать | CVE-2018-6339Эксплойта нет | When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in.whatsapp · whatsapp · CWE-121 | Критическая9,8 | — | 1,5 % | 14 июн. 2019 г. |
39Наблюдать | CVE-2020-1891Эксплойта нет | A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, Whwhatsapp · whatsapp · CWE-787 | Критическая9,8 | — | 1,4 % | 3 сент. 2020 г. |
39Наблюдать | CVE-2021-24026Эксплойта нет | A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business forwhatsapp · whatsapp · CWE-787 | Критическая9,8 | — | 1,4 % | 6 апр. 2021 г. |
39Наблюдать | CVE-2021-24042Эксплойта нет | The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.whatsapp · whatsapp · CWE-122 | Критическая9,8 | — | 1,2 % | 4 янв. 2022 г. |
39Наблюдать | CVE-2021-24041Эксплойта нет | A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could hawhatsapp · whatsapp · CWE-122 | Критическая9,8 | — | 1,2 % | 7 дек. 2021 г. |
36Наблюдать | CVE-2020-1894Эксплойта нет | A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone priorwhatsapp · whatsapp · CWE-787 | Высокая8,8 | — | 1,7 % | 3 сент. 2020 г. |
36Наблюдать | CVE-2021-24035Эксплойта нет | A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 whatsapp · whatsapp · CWE-23 | Критическая9,1 | — | 1,1 % | 11 июн. 2021 г. |
36Наблюдать | CVE-2021-24043Эксплойта нет | A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsAppwhatsapp · whatsapp · CWE-125 | Критическая9,1 | — | 1,0 % | 2 февр. 2022 г. |
35Наблюдать | CVE-2020-1886Эксплойта нет | A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-whatsapp · whatsapp · CWE-120 | Высокая8,8 | — | 1,2 % | 3 сент. 2020 г. |
33Наблюдать | CVE-2020-1910Эксплойта нет | A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed whatsapp · whatsapp · CWE-787 | Высокая7,8 | — | 5,0 % | 2 февр. 2021 г. |
32Наблюдать | CVE-2025-30401Эксплойта нет | A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file whatsapp · whatsapp · CWE-430 | Средняя6,7 | — | 20,9 % | 5 апр. 2025 г. |
31Наблюдать | CVE-2021-24027Proof of concept | A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third pwhatsapp · whatsapp · CWE-524 | Высокая7,5 | — | 3,8 % | 6 апр. 2021 г. |
31Наблюдать | CVE-2018-6344Эксплойта нет | A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established.whatsapp · whatsapp · CWE-122 | Высокая7,5 | — | 1,9 % | 31 дек. 2018 г. |
- CVE-2019-1842682Срочно
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-s
ВысокаяCVSS 8,2KEVГотовый эксплойтEPSS 67 %whatsapp · whatsapp21 янв. 2020 г.
- CVE-2019-356878На этой неделе
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a
КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 30 %whatsapp · whatsapp14 мая 2019 г.
- CVE-2025-5517755В плане
Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25
СредняяCVSS 5,4KEVГотовый эксплойтEPSS 13 %whatsapp · whatsapp29 авг. 2025 г.
- CVE-2019-1193248В плане
A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in W
ВысокаяCVSS 8,8Proof of conceptEPSS 44 %whatsapp · whatsapp3 окт. 2019 г.
- CVE-2020-188941В плане
A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escala
КритическаяCVSS 10,0Эксплойта нетEPSS 4 %whatsapp · whatsapp desktop3 сент. 2020 г.
- CVE-2019-1193340В плане
A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow rem
КритическаяCVSS 9,8Proof of conceptEPSS 4 %whatsapp · whatsapp23 окт. 2019 г.
- CVE-2022-3693440В плане
An integer overflow in WhatsApp could result in remote code execution in an established video call.
КритическаяCVSS 9,8Proof of conceptEPSS 2 %whatsapp · whatsapp22 сент. 2022 г.
- CVE-2020-190940В плане
A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have res
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %whatsapp · whatsapp3 нояб. 2020 г.
- CVE-2018-634940В плане
When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overfl
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %whatsapp · whatsapp14 июн. 2019 г.
- CVE-2018-2065540В плане
When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %whatsapp · whatsapp14 июн. 2019 г.
- CVE-2020-190740В плане
A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %whatsapp · whatsapp6 окт. 2020 г.
- CVE-2018-635040В плане
An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %whatsapp · whatsapp14 июн. 2019 г.
- CVE-2018-633939Наблюдать
When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %whatsapp · whatsapp14 июн. 2019 г.
- CVE-2020-189139Наблюдать
A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, Wh
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %whatsapp · whatsapp3 сент. 2020 г.
- CVE-2021-2402639Наблюдать
A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %whatsapp · whatsapp6 апр. 2021 г.
- CVE-2021-2404239Наблюдать
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %whatsapp · whatsapp4 янв. 2022 г.
- CVE-2021-2404139Наблюдать
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could ha
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %whatsapp · whatsapp7 дек. 2021 г.
- CVE-2020-189436Наблюдать
A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %whatsapp · whatsapp3 сент. 2020 г.
- CVE-2021-2403536Наблюдать
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13
КритическаяCVSS 9,1Эксплойта нетEPSS 1 %whatsapp · whatsapp11 июн. 2021 г.
- CVE-2021-2404336Наблюдать
A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp
КритическаяCVSS 9,1Эксплойта нетEPSS 1 %whatsapp · whatsapp2 февр. 2022 г.
- CVE-2020-188635Наблюдать
A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %whatsapp · whatsapp3 сент. 2020 г.
- CVE-2020-191033Наблюдать
A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed
ВысокаяCVSS 7,8Эксплойта нетEPSS 5 %whatsapp · whatsapp2 февр. 2021 г.
- CVE-2025-3040132Наблюдать
A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file
СредняяCVSS 6,7Эксплойта нетEPSS 20 %whatsapp · whatsapp5 апр. 2025 г.
- CVE-2021-2402731Наблюдать
A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third p
ВысокаяCVSS 7,5Proof of conceptEPSS 3 %whatsapp · whatsapp6 апр. 2021 г.
- CVE-2018-634431Наблюдать
A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established.
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %whatsapp · whatsapp31 дек. 2018 г.