Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Facebook
Whatsapp For Ios

Facebook WhatsApp for iOS Vulnerabilities: CVEs, CISA KEV & Security Advisories

19 CVEs

2 in CISA KEV

Facebook WhatsApp for iOS Vulnerabilities

CVE security advisories and vulnerability history for WhatsApp for iOS by Facebook.

19

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

2

Public exploits

With known exploit

7.0

Avg CVSS

2018–2026

Last updated May 1, 2026

Overview

Facebook WhatsApp for iOS has 19 published CVE records since 2018, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Facebook WhatsApp for iOS, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Facebook WhatsApp for iOS's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High1

Medium4

Low0

11 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of Facebook WhatsApp for iOS's CVEs are confirmed exploited in the wild.

Public exploits

2

2 of Facebook WhatsApp for iOS's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Facebook WhatsApp for iOS version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

2.20.612 CVEs
2.23.10.772 CVEs
2.18.100.61 CVE
2.18.90.241 CVE
2.18.931 CVE
2.19.1001 CVE
2.19.511 CVE
2.20.1001 CVE
2.20.1111 CVE
2.20.901 CVE
2.20.91.41 CVE
2.25.21.731 CVE
2.25.23.731 CVE
2.26.15.721 CVE
unspecified1 CVE
v2.21.2301 CVE
v2.21.321 CVE

Default status

All versions2 CVEs

Find a version

19 CVEs

Sort

Medium vulnerability · 2026-05-01
CVE-2026-23866
Patch
CWE-940
Medium · CVSS 4.3
EPSS 0.0% (2th pct)2026-05-01
Medium vulnerability · 2025-11-18
CVE-2025-55179
Patch
Medium · CVSS 5.4
EPSS 0.0% (9th pct)2025-11-18
Critical vulnerability · 2025-08-29
CVE-2025-55177
CISA KEV
Public exploit
Patch
Added to CISA KEV 2025-09-02
Critical · CVSS 9.4
EPSS 0.8% (74th pct)2025-08-29
Medium vulnerability · 2023-10-04
CVE-2023-38538
Patch
Medium · CVSS 5.0
EPSS 0.1% (26th pct)2023-10-04
Medium vulnerability · 2023-10-04
CVE-2023-38537
Patch
Medium · CVSS 5.6
EPSS 0.1% (29th pct)2023-10-04
Critical vulnerability · 2022-01-04
CVE-2021-24042
Patch
CWE-122
Critical · CVSS 9.8
EPSS 0.5% (67th pct)2022-01-04
Vulnerability · 2021-04-06
CVE-2021-24026
Patch
CWE-787
Unscored
EPSS 0.4% (64th pct)2021-04-06
Vulnerability · 2020-11-03
CVE-2020-1909
Patch
CWE-416
Unscored
EPSS 3.4% (88th pct)2020-11-03
Vulnerability · 2020-11-03
CVE-2020-1908
Patch
CWE-285
Unscored
EPSS 0.1% (30th pct)2020-11-03
Vulnerability · 2020-10-06
CVE-2020-1907
Patch
CWE-787
Unscored
EPSS 1.1% (78th pct)2020-10-06
Vulnerability · 2020-10-06
CVE-2020-1904
Patch
CWE-23
Unscored
EPSS 0.5% (64th pct)2020-10-06
Vulnerability · 2020-10-06
CVE-2020-1903
Patch
CWE-400
Unscored
EPSS 0.3% (52th pct)2020-10-06
Vulnerability · 2020-10-06
CVE-2020-1901
Patch
CWE-400
Unscored
EPSS 0.5% (67th pct)2020-10-06
Vulnerability · 2019-11-14
CVE-2019-11931
Patch
CWE-121
Unscored
EPSS 0.5% (66th pct)2019-11-14
Vulnerability · 2019-09-27
CVE-2019-11927
Patch
CWE-190
Unscored
EPSS 0.3% (52th pct)2019-09-27
Vulnerability · 2019-06-14
CVE-2018-6350
Patch
CWE-125
Unscored
EPSS 0.4% (62th pct)2019-06-14
Vulnerability · 2019-06-14
CVE-2018-20655
Patch
CWE-121
Unscored
EPSS 1.3% (80th pct)2019-06-14
Critical vulnerability · 2019-05-14
CVE-2019-3568
CISA KEV
Public exploit
Patch
CWE-122
Added to CISA KEV 2022-04-19
Critical · CVSS 9.3
EPSS 48.0% (98th pct)2019-05-14
High vulnerability · 2018-12-31
CVE-2018-6344
Patch
CWE-122
High · CVSS 7.5
EPSS 0.6% (69th pct)2018-12-31

Common weakness types

The CWE weakness categories most often found in Facebook WhatsApp for iOS CVEs. Follow any weakness for its full explanation.

CWE-122Heap-based Buffer Overflow3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-285Improper Authorization1 CVE
CWE-416Use After Free1 CVE
CWE-940Improper Verification of Source of a Communication Channel1 CVE
CWE-125Out-of-bounds Read1 CVE

Disclosure activity by year

How many Facebook WhatsApp for iOS CVEs were published each year.

2018

1

2019

5

2020

6

2021

1

2022

1

2023

2

2025

2

2026

1

Other Facebook products

Browse vulnerabilities for other products by Facebook.

HHVM41 CVEs WhatsApp for Android23 CVEs hermes20 CVEs WhatsApp Business for Android20 CVEs WhatsApp Business for iOS15 CVEs Facebook Thrift11 CVEs thrift11 CVEs fbthrift9 CVEs

All Facebook vulnerabilities

Frequently asked questions

Common questions about Facebook WhatsApp for iOS vulnerabilities.

How many CVEs does Facebook WhatsApp for iOS have?

Facebook WhatsApp for iOS has 19 published CVE records since 2018.

How many Facebook WhatsApp for iOS CVEs are in CISA KEV?

Yes — 2 of Facebook WhatsApp for iOS's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Facebook WhatsApp for iOS vulnerabilities?

Yes — 2 of Facebook WhatsApp for iOS's CVEs have a known public exploit.

Which versions of Facebook WhatsApp for iOS are affected?

18 distinct Facebook WhatsApp for iOS versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Facebook WhatsApp for iOS CVEs?

Facebook WhatsApp for iOS's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-400 (Uncontrolled Resource Consumption), CWE-787 (Out-of-bounds Write), CWE-121 (Stack-based Buffer Overflow).

How many critical Facebook WhatsApp for iOS vulnerabilities are there?

Facebook WhatsApp for iOS has 3 critical and 1 high-severity CVEs.

What is the average severity of Facebook WhatsApp for iOS CVEs?

The average CVSS base score across Facebook WhatsApp for iOS's scored CVEs is 7.0.

References

All Facebook vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Facebook WhatsApp for iOS vulnerabilities

Monitor new Facebook WhatsApp for iOS vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References