CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

CVE•added 2026/05/01 4:2 p.m.•16 views

CVE-2026-23866

CVE-2026-23866 affects WhatsApp for iOS and Android, in conjunction with Instagram Reels, where incomplete validation of AI-rich response messages could allow a user to trigger processing of media from an arbitrary URL on another user’s device, potentially invoking OS-controlled custom URL scheme...

4.3CVSS6AI score0.00011EPSS

Exploits0References2Affected Software1

ATTACKERKB•added 2026/05/01 4:2 p.m.•0 views

CVE-2026-23866

Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggerin...

4.3CVSS6AI score0.00011EPSS

Exploits0References3Affected Software2

EUVD•added 2026/05/01 4:2 p.m.•3 views

EUVD-2026-26666

4.3CVSS6AI score0.00011EPSS

Exploits0References2

Positive Technologies•added 2026/05/01 12:0 a.m.•1 views

PT-2026-36500

Name of the Vulnerable Software and Affected Versions WhatsApp for iOS versions 2.25.8.0 through 2.26.15.72 WhatsApp for Android versions 2.25.8.0 through 2.26.7.10 Description Incomplete validation of AI rich response messages for Instagram Reels allows a user to trigger the processing of media...

4.3CVSS5.9AI score0.00011EPSS

Exploits0References14

OSV•added 2025/11/18 3:16 p.m.•2 views

CVE-2025-55179

Incomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApp for Mac v2.25.23.83 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device. We have not seen...

5.4CVSS5.9AI score0.00031EPSS

Exploits0References2