Skip to content

Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Meta: actively exploited vulnerabilities

3 vulnerabilities in Meta products (WhatsApp) are in CISA’s catalog of exploited vulnerabilities. Last added: September 2, 2025.

Meta security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

0 vulnerabilities added in the last 12 months
3 exploited vulnerabilities in the catalog, in total
0 added in the last 30 days

By category

Add just one Meta category to your radar, or open its page.

Phones, tablets and chipsets 3 vulnerabilities

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

WhatsApp 3 vulnerabilities · Phones and tablets

Name used by CISA: Meta Platforms. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Meta list.

Rank 1Meta WhatsApp
CVE-2019-3568
CVE from 2019, added in 2022
WhatsApp VOIP Stack Buffer Overflow Vulnerability
Added more than a year ago: ranked by severity.
Added
Apr 19, 2022
CISA deadline
21 days
CVSS severity
9.8 (critical)
Rank 2Meta WhatsApp
CVE-2019-18426
CVE from 2019, added in 2022
WhatsApp Cross-Site Scripting Vulnerability
Added more than a year ago: ranked by severity.
Added
May 23, 2022
CISA deadline
21 days
CVSS severity
8.2 (high)
Rank 3Meta WhatsApp
CVE-2025-55177
Meta Platforms WhatsApp Incorrect Authorization Vulnerability
Added more than a year ago: ranked by severity.
Added
Sep 2, 2025
CISA deadline
21 days
CVSS severity
5.4 (medium)

Indicative classification, based on the vendor and product names given by CISA. How products are classified.