Vendor

    Facebook

    46 known vulnerabilities in products by Facebook, 3 of them actively exploited (CISA KEV).

    Key figures

    46

    Vulnerabilities

    3

    Actively exploited (KEV)

    0

    Used by ransomware

    18

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Facebook
    CriticalCVE-2019-3568

    WhatsApp VOIP Stack Buffer Overflow Vulnerability

    In CISA KEValso in 5 other products

    		9.8
    CriticalCVE-2019-18426

    WhatsApp Cross-Site Scripting Vulnerability

    In CISA KEValso in 1 other product

    		8.2
    CriticalCVE-2025-55177

    Meta Platforms WhatsApp Incorrect Authorization Vulnerability

    In CISA KEValso in 3 other products

    		5.4
    HighCVE-2019-11932

    Koral-- Android-gif-drawable: Double Free

    		8.8
    MediumCVE-2025-30401

    Facebook WhatsApp Desktop for Windows: Spoofing

    also in 1 other product

    		6.7
    CriticalCVE-2020-1889

    Facebook WhatsApp Desktop: Privilege Issues

    also in 1 other product

    		10.0
    CriticalCVE-2019-11933

    Facebook WhatsApp for Android: Improper Restriction of Operations within the Bounds of a Memory Buffer

    also in 1 other product

    		9.8
    CriticalCVE-2022-36934

    Meta WhatsApp: Heap-based Buffer Overflow

    also in 1 other product

    		9.8
    HighCVE-2020-1910

    WhatsApp Business for Android: Out-of-bounds Write

    		7.8
    CriticalCVE-2020-1909

    Facebook WhatsApp Business for iOS: Use After Free

    also in 2 other products

    		9.8
    CriticalCVE-2018-6349

    Facebook WhatsApp for Android: Stack-based Buffer Overflow

    also in 2 other products

    		9.8
    CriticalCVE-2018-20655

    Facebook WhatsApp for iOS: Stack-based Buffer Overflow

    also in 2 other products

    		9.8
    HighCVE-2021-24027

    Facebook WhatsApp Business for Android: Use of Cache Containing Sensitive Information

    also in 2 other products

    		7.5
    CriticalCVE-2020-1907

    Facebook WhatsApp: Out-of-bounds Write

    also in 4 other products

    		9.8
    CriticalCVE-2018-6350

    Facebook WhatsApp: Out-of-bounds Read

    also in 5 other products

    		9.8
    CriticalCVE-2018-6339

    Facebook WhatsApp for Android: Stack-based Buffer Overflow

    also in 2 other products

    		9.8
    CriticalCVE-2020-1891

    Facebook WhatsApp: Out-of-bounds Write

    also in 1 other product

    		9.8
    HighCVE-2020-1894

    Facebook WhatsApp: Out-of-bounds Write

    also in 1 other product

    		8.8
    CriticalCVE-2021-24026

    Facebook WhatsApp: Out-of-bounds Write

    also in 4 other products

    		9.8
    HighCVE-2018-6344

    Facebook WhatsApp for Android: Heap-based Buffer Overflow

    also in 3 other products

    		7.5
    CriticalCVE-2021-24042

    Facebook WhatsApp: Heap-based Buffer Overflow

    also in 5 other products

    		9.8
    CriticalCVE-2021-24041

    Facebook WhatsApp Business for Android: Heap-based Buffer Overflow

    also in 2 other products

    		9.8
    HighCVE-2020-1886

    Facebook WhatsApp for Android: Classic Buffer Overflow

    also in 2 other products

    		8.8
    CriticalCVE-2021-24035

    Facebook WhatsApp Business for Android: Relative Path Traversal

    also in 2 other products

    		9.1
    CriticalCVE-2021-24043

    Facebook WhatsApp Desktop: Out-of-Bounds Access

    		9.1

    All vulnerabilities in search

    Products

    Products by Facebook
    Facebook WhatsApp Desktop443
    WhatsApp Business272