Vulnerabilities in facebook

144 results
Vexday analysis

Facebook apresenta um perfil de risco mínimo com apenas 1 CVE registrado na base do Vexday, sem incidentes de ataque ativo documentado (KEV) e nenhuma vulnerabilidade crítica. A fraqueza identificada (CWE-284: Improper Access Control) é de natureza moderada e não há atividade recente de disclosure, indicando baixa prioridade de remedição imediata.

CVE-2023-38538MEDIUMA race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app tEPSS 0.2%CVE-2025-55179MEDIUMIncomplete validation of rich response messages in WhatsApp for iOS prior to v2.25.23.73, WhatsApp Business for iOS v2.25.23.82, and WhatsApEPSS 0.2%CVE-2026-66707HIGHWordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66705HIGHWordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%