ACTIEF MISBRUIKT
CVE-2025-55177: Meta Platforms WhatsApp Incorrect Authorization Vulnerability
| Leverancier | Meta Platforms |
|---|---|
| Product | |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 2 sep 2025 |
| CISA-deadline (Amerikaanse overheid) | 23 sep 2025 |
| Zwakte (CWE) | CWE-863 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.
BRONNEN
Andere lekken bij Meta Platforms
- CVE-2025-55182: Meta React Server Components Remote Code Execution Vulnerability
- CVE-2019-18426: WhatsApp Cross-Site Scripting Vulnerability
- CVE-2019-3568: WhatsApp VOIP Stack Buffer Overflow Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.