CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

10 matches found

NVD•added 2026/05/01 4:16 p.m.•6 views

CVE-2026-23866

Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggerin...

4.3CVSS0.00464EPSS

Exploits0References2

CVE•added 2026/05/01 4:2 p.m.•26 views

CVE-2026-23866

CVE-2026-23866 affects WhatsApp for iOS and Android, in conjunction with Instagram Reels, where incomplete validation of AI-rich response messages could allow a user to trigger processing of media from an arbitrary URL on another user’s device, potentially invoking OS-controlled custom URL scheme...

4.3CVSS6AI score0.00464EPSS

Exploits0References2Affected Software1

RedhatCVE•added 2025/11/19 2:10 p.m.•3 views

CVE-2025-55179

Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device. We have not seen...

5.4CVSS6.7AI score0.00149EPSS

Exploits0References1

EUVD•added 2025/11/18 3:30 p.m.•7 views

EUVD-2025-197992

5.4CVSS6.2AI score0.00149EPSS

Exploits0References3

Cvelist•added 2025/11/18 1:56 p.m.•9 views

CVE-2025-55179

5.4CVSS0.00149EPSS

Exploits0References2

Positive Technologies•added 2025/11/18 12:0 a.m.•9 views

PT-2025-47320

Name of the Vulnerable Software and Affected Versions WhatsApp for iOS versions prior to 2.25.23.73 WhatsApp Business for iOS versions prior to 2.25.23.82 WhatsApp for Mac versions prior to 2.25.23.83 Description A flaw exists in the validation of rich response messages. This could allow a user t...

5.4CVSS6.5AI score0.00149EPSS

Exploits0References4

RedhatCVE•added 2025/05/22 4:27 p.m.•8 views

CVE-2020-1894

A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk...

8.8CVSS8AI score0.01752EPSS

Exploits0

RedhatCVE•added 2025/05/22 3:26 p.m.•8 views

CVE-2020-1891

A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices...

9.8CVSS7AI score0.01488EPSS

Exploits0