ZeusQA
Start free

Known exploited vulnerabilities

Meta Platforms vulnerabilities attackers have used

Every Meta Platforms vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 Meta Platforms vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2025-55177, added Sep 2, 2025. WhatsApp has the most entries (3).

In KEV, all time
3
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every Meta Platforms entry in CISA KEV

  1. CVE-2025-55177

    Added · due

    Meta Platforms WhatsApp Incorrect Authorization Vulnerability

    Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from…

  2. CVE-2019-18426

    Added · due

    WhatsApp Cross-Site Scripting Vulnerability

    A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.

  3. CVE-2019-3568

    Added · due

    WhatsApp VOIP Stack Buffer Overflow Vulnerability

    A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works