CVE-2020-1908CWE-285

CVE-2020-1908: vulnerability in Facebook WhatsApp Business for iOS

Published · Updated

Follow this CVE+ Monitor WhatsApp+ Monitor WhatsApp Business

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked.
Affected products
Facebook · WhatsApp Business for iOSFacebook · WhatsApp for iOS
Related CVEs — Facebook WhatsApp Business for iOS

In the same product, most dangerous first.

CVE-2019-3568CRITICALCVE-2019-3568EPSS 30.1%KEVCVE-2025-55177MEDIUMCVE-2025-55177EPSS 13.5%KEVCVE-2020-1909—CVE-2020-1909EPSS 2.3%CVE-2018-20655—CVE-2018-20655EPSS 2.2%CVE-2018-6344HIGHCVE-2018-6344EPSS 1.9%CVE-2020-1907—CVE-2020-1907EPSS 1.9%