whatsapp whatsapp business

Name: whatsapp whatsapp business
Brand: whatsapp

productUS

cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

13critical8high4medium0low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-55177US	—OT critical	13.1% (96th)	KEV	2.25.21.78	2025-08-29	2.22.25.2 → 2.25.21.78
CVE-2019-3568US	critical9.8OT critical	30.1% (98th)	KEV	2.19.51	2019-05-14	2 versions
CVE-2021-24027US	high7.5	3.81% (90th)	Exploit	2.21.4.18	2021-04-06	< 2.21.4.18
CVE-2019-11931US	high7.8	1.21% (68th)	Exploit	2.19.104	2019-11-14	2 versions
CVE-2020-1910US	high7.8	5.10% (92nd)	—	2.21.1.13	2021-02-02	< 2.21.1.13
CVE-2022-36934US	critical9.8	2.46% (84th)	—	2.22.16.12	2022-09-22	< 2.22.16.12
CVE-2020-1909US	critical9.8	2.28% (83rd)	—	2.20.111	2020-11-03	< 2.20.111
CVE-2018-6349US	critical9.8	2.24% (83rd)	—	2.18.132	2019-06-14	< 2.18.132
CVE-2018-20655US	critical9.8	2.20% (82nd)	—	2.18.90.24	2019-06-14	< 2.18.90.24
CVE-2020-1907US	critical9.8	1.89% (79th)	—	2.20.196.12	2020-10-06	2 versions
CVE-2020-1894US	high8.8	1.75% (78th)	—	2.20.20	2020-09-03	2 versions
CVE-2018-6350US	critical9.8	1.69% (77th)	—	2.18.100.2	2019-06-14	2 versions
CVE-2018-6339US	critical9.8	1.54% (75th)	—	2.18.150	2019-06-14	2.18.103 → 2.18.150
CVE-2020-1891US	critical9.8	1.49% (74th)	—	2.20.20	2020-09-03	2 versions
CVE-2021-24026US	critical9.8	1.40% (72nd)	—	2.21.32	2021-04-06	2 versions
CVE-2021-24041US	critical9.8	1.25% (69th)	—	2.21.22.7	2021-12-07	< 2.21.22.7
CVE-2020-1886US	high8.8	1.24% (69th)	—	2.20.2	2020-09-03	< 2.20.2
CVE-2020-1890US	high7.5	1.18% (68th)	—	2.20.2	2020-09-03	< 2.20.2
CVE-2021-24035US	critical9.1	1.13% (66th)	—	2.21.8.13	2021-06-11	< 2.21.8.13
CVE-2020-1904US	medium5.5	1.11% (66th)	—	2.20.61	2020-10-06	< 2.20.61
CVE-2021-24043US	critical9.1	1.09% (65th)	—	no fix	2022-02-02	2 versions
CVE-2019-3566US	medium5.9	1.07% (65th)	—	no fix	2019-05-10	2.19.22 → 2.19.38
CVE-2020-1902US	high7.5OT elevated	0.67% (52nd)	—	no fix	2020-10-06	2.20.35 → 2.20.49
CVE-2020-1903US	medium5.5	0.66% (51st)	—	2.20.61	2020-10-06	< 2.20.61
CVE-2020-1906US	high7.8	0.31% (23rd)	—	2.20.46	2020-10-06	< 2.20.46
CVE-2020-1908US	medium4.6	0.29% (21st)	—	2.20.100	2020-11-03	< 2.20.100
CVE-2025-55179US	—	0.18% (8th)	—	2.25.23.82	2025-11-18	2.25.8.14 → 2.25.23.82

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write12 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-122Heap-based Buffer Overflow4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-23Relative Path Traversal2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan