Meta Vulnerabilities and Affected Products
Vulnerabilities associated with WhatsApp cloud service.
Products
Clear product- react-server-dom-parcel8 vulnerabilities
- react-server-dom-turbopack8 vulnerabilities
- react-server-dom-webpack8 vulnerabilities
- WhatsApp Business for Android2 vulnerabilities
- WhatsApp Business for iOS2 vulnerabilities
- WhatsApp for Android2 vulnerabilities
- WhatsApp for iOS2 vulnerabilities
- React Developer Tools Extension1 vulnerability
- React Server Components1 vulnerability
- tac_plus1 vulnerability
- Tacquito1 vulnerability
- WhatsApp cloud service1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
WhatsApp PDF Content Sandbox BypassThe WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL. Mar 19, 2025 | CVSS3.5v3.1 | EPSS0.241% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |