← ExploitWatch
HomeExploited Vulnerabilities

CVE-2019-18426 — Actively Exploited: WhatsApp (Meta Platforms)

A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.

CVE IDCVE-2019-18426
VendorMeta Platforms
ProductWhatsApp
Vulnerability nameWhatsApp Cross-Site Scripting Vulnerability
Date added2022-05-23
Remediation due2022-06-13
Known ransomware useUnknown
Required actionApply updates per vendor instructions.
DescriptionA vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →