Facebook Hermes

Name: Facebook Hermes
Brand: Facebook

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

14critical6high0medium0low

updated 2026-10-27

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-1914US	critical9.8	2.51% (85th)	—	no fix	2020-10-08	≤ commit prior to b2021df620824627f5a8c96615edbd1eb7fdddfc
CVE-2020-1896US	critical9.8	2.42% (84th)	—	no fix	2021-02-02	≤ commit prior to 86543ac47e59c522976b5632b8bf9a2a4583c7d2
CVE-2020-1911US	critical9.8	2.00% (81st)	—	no fix	2020-09-04	≤ commit prior to fe52854cdf6725c2eaa9e125995da76e6ceb27da
CVE-2020-1912US	high8.1	1.81% (79th)	—	no fix	2020-09-09	≤ commit prior to 091835377369c8fd5917d9b87acffa721ad2a168
CVE-2021-24037US	critical9.8	1.80% (78th)	—	no fix	2021-06-15	≤ commit prior to d86e185e485b6330216dee8e854455c694e3a36e
CVE-2020-1915US	high7.5	1.60% (76th)	—	no fix	2020-10-26	≤ commit prior to 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0
CVE-2021-24044US	critical9.8	1.26% (69th)	—	0.10.0	2022-01-15	unspecified → 0.10.0
CVE-2021-24045US	critical9.8	1.25% (69th)	—	0.10.0	2021-12-13	unspecified → 0.10.0
CVE-2023-30470US	critical9.8	1.25% (69th)	—	da8990f737ebb9d9810633502f65ed462b819c09	2023-05-18	0 → da8990f737ebb9d9810633502f65ed462b819c09
CVE-2020-1913US	high8.1	1.20% (68th)	—	no fix	2020-09-09	≤ commit prior to 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6
CVE-2022-40138US	critical9.8	1.18% (68th)	—	commit prior to 6aa825e480d48127b480b08d13adf70033237097	2022-10-11	unspecified → commit prior to 6aa825e480d48127b480b08d13adf70033237097
CVE-2022-35289US	critical9.8	1.17% (67th)	—	prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374	2022-10-11	unspecified → prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374
CVE-2022-32234US	critical9.8	1.17% (67th)	—	prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1	2022-10-11	unspecified → prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1
CVE-2023-28081US	critical9.8	0.89% (59th)	—	e6ed9c1a4b02dc219de1648f44cd808a56171b81	2023-05-18	0 → e6ed9c1a4b02dc219de1648f44cd808a56171b81
CVE-2023-25933US	critical9.8	0.89% (59th)	—	e6ed9c1a4b02dc219de1648f44cd808a56171b81	2023-05-18	0 → e6ed9c1a4b02dc219de1648f44cd808a56171b81
CVE-2023-23557US	critical9.8	0.89% (59th)	—	a00d237346894c6067a594983be6634f4168c9ad	2023-05-18	0 → a00d237346894c6067a594983be6634f4168c9ad
CVE-2023-23556US	critical9.8	0.89% (59th)	—	a6dcafe6ded8e61658b40f5699878cd19a481f80	2023-05-18	0 → a6dcafe6ded8e61658b40f5699878cd19a481f80
CVE-2022-27810US	high7.5	0.88% (59th)	—	0.12.0	2022-10-06	unspecified → 0.12.0
CVE-2023-24832US	high7.5	0.72% (54th)	—	5cae9f72975cf0e5a62b27fdd8b01f103e198708	2023-05-18	0 → 5cae9f72975cf0e5a62b27fdd8b01f103e198708
CVE-2023-24833US	high7.5	0.64% (51st)	—	a6dcafe6ded8e61658b40f5699878cd19a481f80	2023-05-18	0 → a6dcafe6ded8e61658b40f5699878cd19a481f80

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-843Access of Resource Using Incompatible Type ('Type Confusion')5 CVEs
CWE-416Use After Free4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-681Incorrect Conversion between Numeric Types2 CVEs
CWE-1119Excessive Use of Unconditional Branching1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)20 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan