← Back to browse · API

CVE-2019-18426

Severity
HIGH
CVSS
8.2
EPSS
0.67859
Risk score
81.55
CISA KEV
Yes
PoC
No
Published
2022-05-23
Modified
2022-05-23
First seen
2026-08-07
Aliases
EUVD-2019-8195, GHSA-X67C-8VP2-26MR
Products
Facebook:WhatsApp Desktop 0.3.9309, Facebook:WhatsApp Desktop unspecified <0.3.9309, Meta Platforms:WhatsApp
Sources
euvd EUVD-2019-8195
cisa.gov CVE-2019-18426

Description

A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.

References