8.2
Élevée
CVE-2019-18426 WhatsApp Cross-Site Scripting Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-79
Description
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WhatsApp Desktop 0.3 | premières → 0.3.9309 | 0.3.9309 |
Autres CVE de WhatsApp Desktop
Les 5 CVE de WhatsApp Desktop →
CVE-2021-24042
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23,…
9.8
Critique
CVE-2020-1889
A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in…
Non notée
CVE-2019-11928
An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon…
Non notée
CVE-2019-3571
An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send…
Non notée