Skip to content
Noroxi

Signal records

15 published records for vendor signal.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 22
  5. 23
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2019-17192
    40Plan

    The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a

    CriticalCVSS 9.8No exploitEPSS 2%

    signal · private messengerOct 4, 2019

  • CVE-2018-16132
    34Monitor

    The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably l

    HighCVSS 8.6No exploitEPSS 1%

    signal · signalAug 29, 2018

  • CVE-2022-28345
    31Monitor

    The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection.

    HighCVSS 7.5No exploitEPSS 2%

    signal · signalApr 15, 2022

  • CVE-2019-17191
    31Monitor

    The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user inter

    HighCVSS 7.5No exploitEPSS 1%

    signal · private messengerOct 4, 2019

  • CVE-2023-24068
    31Monitor

    Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify conversation attachments within the attachments.noinde

    HighCVSS 7.8No exploitEPSS 0%

    signal · signal-desktopJan 23, 2023

  • CVE-2019-19954
    29Monitor

    Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmi

    HighCVSS 7.3No exploitEPSS 0%

    signal · signal-desktopDec 24, 2019

  • CVE-2019-9970
    27Monitor

    Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerab

    MediumCVSS 6.5No exploitEPSS 1%

    signal · private messengerMar 23, 2019

  • CVE-2018-9840
    27Monitor

    The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via certain rapi

    MediumCVSS 6.8No exploitEPSS 0%

    signal · signalApr 10, 2018

  • CVE-2018-11101
    24Monitor

    Open Whisper Signal (aka Signal-Desktop) through 1.10.1 allows XSS via a resource location specified in an attribute of a SCRIPT, IFRAME, or

    MediumCVSS 6.1No exploitEPSS 1%

    signal · signal-desktopMay 17, 2018

  • CVE-2018-10994
    24Monitor

    js/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) before 1.10.1 allows XSS via a URL.

    MediumCVSS 6.1No exploitEPSS 1%

    signal · signal-desktopMay 14, 2018

  • CVE-2020-5753
    21Monitor

    Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disc

    MediumCVSS 5.3No exploitEPSS 1%

    signal · private messengerMay 20, 2020

  • CVE-2018-3988
    18Monitor

    Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature avai

    MediumCVSS 4.7No exploitEPSS 0%

    signal · private messengerDec 10, 2018

  • CVE-2018-14023
    16Monitor

    Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.

    MediumCVSS 4.0No exploitEPSS 0%

    signal · signal-desktopAug 20, 2018

  • CVE-2023-24069
    13Monitor

    Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially sensitive attachments sent in messages fro

    LowCVSS 3.3No exploitEPSS 0%

    signal · signal-desktopJan 23, 2023

  • CVE-2025-5715
    1Monitor

    Signal App Biometric Authentication missing critical step in authentication

    LowCVSS 0.3No exploitEPSS 0%

    signal · signalJun 6, 2025