CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WhatsApp iOS and macOS Linked Device Synchronization Authorization Bypass Vulnerability (CVE-2025-55177) Advisory
[Affected Scope] WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS prior to v2.25.21.78, and WhatsApp for Mac prior to v2.25.21.78
[Impact] Unrelated attackers can bypass authorization to trigger the processing of arbitrary URL content on target devices, potentially leading to full device compromise when chained with OS-level exploits
[Mitigation] Immediately update WhatsApp and WhatsApp Business to the latest secure versions via the App Store and apply pending Apple OS security patches
Apple iOS and iPadOS USB Restricted Mode Bypass Vulnerability (CVE-2025-24200) Analysis & Mitigation Guide
[Affected Scope] Apple iPhone and iPad devices running iOS/iPadOS versions prior to 15.8.4, 16.7.11, 17.7.5, or 18.3.1
[Impact] A physical attacker can disable USB Restricted Mode on a locked device, potentially allowing unauthorized data extraction and forensic access
[Mitigation] Immediately update all affected devices to iOS/iPadOS 15.8.4, 16.7.11, 17.7.5, 18.3.1 or later