CVE-2021-24027CWE-524

CVE-2021-24027: vulnerability in Facebook WhatsApp for Android

Published · Updated

Follow this CVE+ Monitor WhatsApp+ Monitor WhatsApp Business

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.8%
A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material.
Affected products
Facebook · WhatsApp Business for AndroidFacebook · WhatsApp for Android
Related CVEs — Facebook WhatsApp for Android

In the same product, most dangerous first.

CVE-2019-3568CRITICALCVE-2019-3568EPSS 30.1%KEVCVE-2019-11933—CVE-2019-11933EPSS 4.1%CVE-2018-6349—CVE-2018-6349EPSS 2.2%CVE-2018-6344HIGHCVE-2018-6344EPSS 1.9%CVE-2020-1907—CVE-2020-1907EPSS 1.9%CVE-2020-1894—CVE-2020-1894EPSS 1.8%