GCVE - cpe:2.3:a:facebook:whatsapp_desktop:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:facebook:whatsapp_desktop:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Facebook (`c319c35a-3469-5baa-b3bd-8582d1206a92`)
Product	Whatsapp Desktop (`1f267ebd-48b1-52be-9601-74a0ee1d45e7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-24042`	vulnerable	2026-06-08 05:30:03.529746	Details available The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor. Published: 2022-01-04T18:55:08.000Z Updated: 2025-05-22T18:36:53.143Z Open on db.gcve.eu Reference links https://www.whatsapp.com/security/advisories/2021/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-1889`	vulnerable	2026-06-08 05:21:03.468337	Details available A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process. Published: 2020-09-03T21:10:18.000Z Updated: 2024-08-04T06:53:59.559Z Open on db.gcve.eu Reference links https://www.whatsapp.com/security/advisories/2020/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3571`	vulnerable	2026-06-08 05:13:55.089972	Details available An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that would be displayed with a wrong extension. Published: 2019-07-16T20:16:35.000Z Updated: 2024-08-04T19:12:09.515Z Open on db.gcve.eu Reference links https://www.facebook.com/security/advisories/cve-2019-3571	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-18426`	vulnerable	2026-06-08 05:13:11.589498	Details available A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message. Published: 2020-01-21T20:30:15.000Z Updated: 2025-10-21T23:35:53.174Z Open on db.gcve.eu Reference links https://www.facebook.com/security/advisories/cve-2019-18426 http://packetstormsecurity.com/files/157097/WhatsApp-Desktop-0.3.9308-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-11928`	vulnerable	2026-06-08 05:12:38.296356	Details available An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message. Published: 2020-09-03T21:10:17.000Z Updated: 2024-08-04T23:10:29.535Z Open on db.gcve.eu Reference links https://www.whatsapp.com/security/advisories/2020/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.