Frozen view of version 2.18.295. CVE statuses are recomputed against this version.
View current version
Android
High-severity open CVE
WhatsApp LLC
- Known vulnerabilities
- 27
- Still open
- 19
- KEV open
- 0
- Max CVSS (historical)
- 9.8
Recommended action
Update to ≥ 2.22.16.12 to clear the 19 open CVEs.
Known vulnerabilities (CVE)
19 open
2 undetermined
6 fixed
Latest matched CVE: 2026
Test a different version
| CVE |
|---|
|
CVE-2026-23866
Fixed
MEDIUM 4.3
Network Fixed in: > 2.26.7.10
|
|
CVE-2022-27492
Open
HIGH 7.8
Local Fixed in: 2.22.16.2
|
|
CVE-2022-36934
Open
CRITICAL 9.8
Network Fixed in: 2.22.16.12
|
|
CVE-2020-20096
Open
MEDIUM 6.5
Network Fixed in: > 2.19.222
|
|
CVE-2021-24042
Open
CRITICAL 9.8
Network Fixed in: 2.21.23
|
|
CVE-2021-24041
Open
CRITICAL 9.8
Network Fixed in: 2.21.22.7
|
|
CVE-2021-24035
Open
CRITICAL 9.1
Network Fixed in: 2.21.8.13
|
|
CVE-2021-24027
Open
HIGH 7.5
Network Fixed in: 2.21.4.18
|
|
CVE-2021-24026
Open
CRITICAL 9.8
Network Fixed in: 2.21.3
|
|
CVE-2020-1910
Open
HIGH 7.8
Local Fixed in: 2.21.1.13
|
|
CVE-2020-1907
Open
CRITICAL 9.8
Network Fixed in: 2.20.196.16
|
|
CVE-2020-1906
Open
HIGH 7.8
Local Fixed in: 2.20.130
|
|
CVE-2020-1905
Open
LOW 3.3
Local Fixed in: 2.20.185
|
|
CVE-2020-1902
Fixed
HIGH 7.5
Network Fixed in: > 2.20.140
|
|
CVE-2020-1894
Open
HIGH 8.8
Network Fixed in: 2.20.35
|
|
CVE-2020-1891
Open
CRITICAL 9.8
Network Fixed in: 2.20.17
|
|
CVE-2020-1890
Open
HIGH 7.5
Network Fixed in: 2.20.11
|
|
CVE-2020-1886
Open
HIGH 8.8
Network Fixed in: 2.20.11
|
|
CVE-2019-11931
Open
HIGH 7.8
Local Fixed in: 2.19.274
|
|
CVE-2019-11933
Open
CRITICAL 9.8
Network Fixed in: 2.19.291
|
|
CVE-2019-11932
Open
HIGH 8.8
Network Fixed in: 2.19.244
|
|
CVE-2019-11927
Fixed
HIGH 7.8
Local Fixed in: 2.9.143
|
|
CVE-2018-6349
Fixed
CRITICAL 9.8
Network Fixed in: 2.18.248
|
|
CVE-2018-6339
Fixed
CRITICAL 9.8
Network Fixed in: 2.18.295
|
|
CVE-2017-8769
Fixed
MEDIUM 4.6
Physical Fixed in: 2.16.323
|
2 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Description, scores, permissions, trackers and HackerOne reports reflect the current store state and are only shown on the current page.