Dashboard / CVE-2025-55177

CVE-2025-55177

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 3/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.

CISA Known Exploited Vulnerability

Vendor / Product Meta Platforms — WhatsApp
Date Added 2025-09-02
Remediation Due 2025-09-23
https://www.whatsapp.com/security/advisories/2025/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-55177

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
whatsapp whatsapp 2.22.25.2 – 2.25.21.73
whatsapp whatsapp 2.22.25.2 – 2.25.21.78
whatsapp whatsapp_business 2.22.25.2 – 2.25.21.78

References & Advisories (3)

Bug Bounty Relevance

3 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

13.08%
Raw Score 0.130840
Percentile 96.3%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links