Brand
Meta: actively exploited vulnerabilities
3 vulnerabilities in Meta products (WhatsApp) are in CISA’s catalog of exploited vulnerabilities. Last added: September 2, 2025.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
0 vulnerabilities added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Meta category to your radar, or open its page.
- Phones, tablets and chipsets 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- WhatsApp3 vulnerabilities, Phones and tablets
Name used by CISA: Meta Platforms. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Meta list.
- Rank 1
Meta WhatsAppCVE-2019-3568
WhatsApp VOIP Stack Buffer Overflow Vulnerability
CVE from 2019, added in 2022
CVSS severity 9.8critical
Added Apr 19, 2022
- Rank 2
Meta WhatsAppCVE-2019-18426
WhatsApp Cross-Site Scripting Vulnerability
CVE from 2019, added in 2022
CVSS severity 8.2high
Added May 23, 2022
- Rank 3
Meta WhatsAppCVE-2025-55177
Meta Platforms WhatsApp Incorrect Authorization Vulnerability
CVSS severity 5.4medium
Added Sep 2, 2025
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.