Exploited vulnerabilities

Meta Platforms

3 Meta Platforms vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue3
Last 12 months0
In ransomware campaigns0
Last addition2 September 2025

The vulnerabilities3

  1. 2 September 2025CVE-2025-55177WhatsAppMeta Platforms WhatsApp Incorrect Authorization Vulnerability
  2. 23 May 2022CVE-2019-18426WhatsAppWhatsApp Cross-Site Scripting Vulnerability
  3. 19 April 2022CVE-2019-3568WhatsAppWhatsApp VOIP Stack Buffer Overflow Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Meta Platforms included.

All vendorsThe catalogue on the CISA website