Facebook vendor intelligence
Facebook Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting Facebook products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 4
- Known exploited vulnerabilities affecting Facebook products
- In CISA KEV
- 3
- Records also listed in the official catalog
- Beyond CISA KEV
- 1
- Additional exploited vulnerability absent from CISA KEV
- Sensor Observed
- 0
- Facebook KEVs with sensor-observed exploitation activity
The catalog gap matters for Facebook exposure
One of the four exploited Facebook vulnerabilities tracked by Previdian is not in CISA KEV. Teams relying on the official catalog alone would miss one-quarter of this vendor portfolio.
- 75%
- Covered by CISA
- 25%
- Beyond CISA
- 4
- Product families
Attested Facebook vulnerabilities
4 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2025-55177
Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78,... |
WhatsApp Desktop for Mac, WhatsApp Business for iOS, WhatsApp for iOS | Confirmed | In CISA | 01 Jun 2026 |
|
CVE-2021-24217
Facebook for WordPress < 3.0.0 - PHP Object Injection with POP Chain |
Facebook for WordPress | High | Beyond CISA | 25 Mar 2021 |
|
CVE-2019-3568
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target... |
WhatsApp for Android, WhatsApp Business for Android, WhatsApp for iOS, WhatsApp Business for iOS, WhatsApp for Windows Phone, WhatsApp for Tizen | Confirmed | In CISA | 19 Apr 2022 |
|
CVE-2019-18426
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site... |
WhatsApp Desktop | Confirmed | In CISA | 23 May 2022 |
No Facebook vulnerabilities match this search or filter.
Showing 4 of 4 on this page (4 Facebook known exploited vulnerabilities).
Recurring weakness patterns
Heap-based buffer overflow, deserialization, and neutralization account for three mapped occurrences across this Facebook KEV portfolio.