Product by Facebook

WhatsApp Business

27 known vulnerabilities in WhatsApp Business (Facebook), 2 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in WhatsApp Business (Facebook)

Critical	CVE-2019-3568	WhatsApp VOIP Stack Buffer Overflow Vulnerability In CISA KEValso in 6 other products	9.8	14.05.2019
Critical	CVE-2025-55177	Meta Platforms WhatsApp Incorrect Authorization Vulnerability In CISA KEValso in 4 other products	5.4	29.08.2025
Critical	CVE-2022-36934	Meta WhatsApp: Heap-based Buffer Overflow also in 2 other products	9.8	22.09.2022
High	CVE-2020-1910	WhatsApp Business for Android: Out-of-bounds Write also in 1 other product	7.8	02.02.2021
Critical	CVE-2020-1909	Facebook WhatsApp Business for iOS: Use After Free also in 3 other products	9.8	03.11.2020
Critical	CVE-2018-6349	Facebook WhatsApp for Android: Stack-based Buffer Overflow also in 3 other products	9.8	14.06.2019
Critical	CVE-2018-20655	Facebook WhatsApp for iOS: Stack-based Buffer Overflow also in 3 other products	9.8	14.06.2019
High	CVE-2021-24027	Facebook WhatsApp Business for Android: Use of Cache Containing Sensitive Information also in 3 other products	7.5	06.04.2021
Critical	CVE-2020-1907	Facebook WhatsApp: Out-of-bounds Write also in 5 other products	9.8	06.10.2020
Critical	CVE-2018-6350	Facebook WhatsApp: Out-of-bounds Read also in 6 other products	9.8	14.06.2019
Critical	CVE-2018-6339	Facebook WhatsApp for Android: Stack-based Buffer Overflow also in 3 other products	9.8	14.06.2019
Critical	CVE-2020-1891	Facebook WhatsApp: Out-of-bounds Write also in 2 other products	9.8	03.09.2020
High	CVE-2020-1894	Facebook WhatsApp: Out-of-bounds Write also in 2 other products	8.8	03.09.2020
Critical	CVE-2021-24026	Facebook WhatsApp: Out-of-bounds Write also in 5 other products	9.8	06.04.2021
Critical	CVE-2021-24041	Facebook WhatsApp Business for Android: Heap-based Buffer Overflow also in 3 other products	9.8	07.12.2021
High	CVE-2020-1886	Facebook WhatsApp for Android: Classic Buffer Overflow also in 3 other products	8.8	03.09.2020
Critical	CVE-2021-24035	Facebook WhatsApp Business for Android: Relative Path Traversal also in 3 other products	9.1	11.06.2021
Critical	CVE-2021-24043	Facebook WhatsApp Desktop: Out-of-Bounds Access also in 1 other product	9.1	02.02.2022
High	CVE-2019-11931	Facebook WhatsApp: Stack-based Buffer Overflow also in 6 other products	7.8	14.11.2019
High	CVE-2020-1890	Facebook WhatsApp for Android: Improper Input Validation also in 3 other products	7.5	03.09.2020
Medium	CVE-2019-3566	Facebook WhatsApp for Android: Improper Access Control also in 3 other products	5.9	10.05.2019
Medium	CVE-2020-1904	Facebook WhatsApp for iOS: Relative Path Traversal also in 3 other products	5.5	06.10.2020
High	CVE-2020-1902	Facebook WhatsApp for Android: Exposure of Sensitive Information to an Unauthorized Actor also in 3 other products	7.5	06.10.2020
Medium	CVE-2020-1903	Facebook WhatsApp for iOS: Uncontrolled Resource Consumption also in 3 other products	5.5	06.10.2020
High	CVE-2020-1906	Facebook WhatsApp for Android: Heap-based Buffer Overflow also in 3 other products	7.8	06.10.2020

All vulnerabilities in search

All products by Facebook

Key figures

Vulnerabilities