cve.bz

CVE-2019-18426

8.2 highKEVEPSS 68%

High (8.2) in Meta Platforms WhatsApp. In CISA KEV since 2022-05-23. EPSS 68% chance of exploitation in the next 30 days.

A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message.

Severity

CVSS 3.1

8.2 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
EPSS
68% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2022-05-23, due 2022-06-13
CWE
CWE-79
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON