Whatsapp vulnerabilities
We track 3 vulnerabilities in Whatsapp products across 2 products. 2 are rated high or critical, and 3 have been exploited in real attacks. The most recent was published on August 29, 2025.
Latest Whatsapp vulnerabilities
- 5.4 Medium severity
Meta Platforms WhatsApp Incorrect Authorization Exploited
Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing of content from an a
- 8.2 High severity
WhatsApp Cross-Site Scripting Exploited
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a sp
- 9.8 Critical severity
WhatsApp VOIP Stack Buffer Overflow Exploited
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v