[ Vendor · 6 CVEs ]
CVEs affecting Facebook published in the last 30 days, plus any Facebook CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-84895 | 28 Sep 2026 | CVSS 7.3 | Facebook proxygenIn proxygen from v2026.04.06.00 until v2026.09.28.00, QuicWtSession::closeSession accesses its member fields after calling the base… | |
| CVE-2026-91095 | 28 Sep 2026 | CVSS 5.3 | Facebook proxygenIn proxygen from v2024.10.28.00 until v2026.09.28.00, the HTTPTransaction::onWebTransportUniStream and HTTPTransaction::onWebTransportBidiStream APIs… | |
| CVE-2026-91096 | 28 Sep 2026 | CVSS 7.5 | Facebook proxygenIn proxygen from v2024.10.28.00 until v2026.09.28.00, WebTransportImpl::terminateSessionStreams (WebTransportImpl::destroy in releases before… | |
| CVE-2025-55177 | 29 Aug 2025 | CVSS 5.4 | Meta Platforms WhatsApp Incorrect AuthorizationIncomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78… | Exploited |
| CVE-2019-18426 | 21 Jan 2020 | CVSS 8.2 | WhatsApp Cross-Site ScriptingA vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site… | Exploited |
| CVE-2019-3568 | 14 May 2019 | CVSS 9.8 | WhatsApp VOIP Stack Buffer OverflowA buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target… | Exploited |