CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-01-21
WhatsApp Desktop Cross-Site Scripting (XSS) and Local File Read Vulnerability (CVE-2019-18426)
[Affected Scope] WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10
[Impact] Cross-site scripting (XSS) and local file reading, potentially leading to remote code execution (RCE) and sensitive data exfiltration upon user interaction
[Mitigation] Immediately update WhatsApp Desktop to version 0.3.9309 or higher and WhatsApp for iPhone to version 2.20.10 or higher