[ Vendor · 4 CVEs ]
Meta Platforms, Inc
CVEs affecting Meta Platforms, Inc published in the last 30 days, plus any Meta Platforms, Inc CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104026 | 2 Oct 2026 | CVSS 7.8 | Meta Platforms, Inc Sapling SCMIn Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed… | |
| CVE-2026-92172 | 30 Sep 2026 | CVSS 8.8 | Meta Platforms, Inc Meta Horizon OSPrior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon… | |
| CVE-2026-92173 | 30 Sep 2026 | CVSS 9.1 | Meta Platforms, Inc Meta Horizon OSPrior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell… | |
| CVE-2026-84894 | 28 Sep 2026 | CVSS 7.5 | Meta Platforms, Inc moxygenIn moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the… |