- Known vulnerabilities
- 27
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- 9.8
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Known vulnerabilities (CVE)
Latest matched CVE: 2026
Test a different version
| CVE |
|---|
|
CVE-2026-23866
Fixed
MEDIUM 4.3
Network Fixed in: > 2.26.7.10
|
|
CVE-2022-27492
Fixed
HIGH 7.8
Local Fixed in: 2.22.16.2
|
|
CVE-2022-36934
Fixed
CRITICAL 9.8
Network Fixed in: 2.22.16.12
|
|
CVE-2020-20096
Fixed
MEDIUM 6.5
Network Fixed in: > 2.19.222
|
|
CVE-2021-24042
Fixed
CRITICAL 9.8
Network Fixed in: 2.21.23
|
|
CVE-2021-24041
Fixed
CRITICAL 9.8
Network Fixed in: 2.21.22.7
|
|
CVE-2021-24035
Fixed
CRITICAL 9.1
Network Fixed in: 2.21.8.13
|
|
CVE-2021-24027
Fixed
HIGH 7.5
Network Fixed in: 2.21.4.18
|
|
CVE-2021-24026
Fixed
CRITICAL 9.8
Network Fixed in: 2.21.3
|
|
CVE-2020-1910
Fixed
HIGH 7.8
Local Fixed in: 2.21.1.13
|
|
CVE-2020-1907
Fixed
CRITICAL 9.8
Network Fixed in: 2.20.196.16
|
|
CVE-2020-1906
Fixed
HIGH 7.8
Local Fixed in: 2.20.130
|
|
CVE-2020-1905
Fixed
LOW 3.3
Local Fixed in: 2.20.185
|
|
CVE-2020-1902
Fixed
HIGH 7.5
Network Fixed in: > 2.20.140
|
|
CVE-2020-1894
Fixed
HIGH 8.8
Network Fixed in: 2.20.35
|
|
CVE-2020-1891
Fixed
CRITICAL 9.8
Network Fixed in: 2.20.17
|
|
CVE-2020-1890
Fixed
HIGH 7.5
Network Fixed in: 2.20.11
|
|
CVE-2020-1886
Fixed
HIGH 8.8
Network Fixed in: 2.20.11
|
|
CVE-2019-11931
Fixed
HIGH 7.8
Local Fixed in: 2.19.274
|
|
CVE-2019-11933
Fixed
CRITICAL 9.8
Network Fixed in: 2.19.291
|
|
CVE-2019-11932
Fixed
HIGH 8.8
Network Fixed in: 2.19.244
|
|
CVE-2019-11927
Fixed
HIGH 7.8
Local Fixed in: 2.9.143
|
|
CVE-2018-6349
Fixed
CRITICAL 9.8
Network Fixed in: 2.18.248
|
|
CVE-2018-6339
Fixed
CRITICAL 9.8
Network Fixed in: 2.18.295
|
|
CVE-2017-8769
Fixed
MEDIUM 4.6
Physical Fixed in: 2.16.323
|
2 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Context
Context
Description
Simple. Reliable. Private.
Data collected and shared
Source: Play Store Data Safety · 13 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
Other apps by this publisher
Apps published by WhatsApp LLC
FAQ
FAQ: WhatsApp
Does WhatsApp have known security vulnerabilities?
WhatsApp (com.whatsapp) on Android has 27 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of WhatsApp affected by any open CVE?
Version 2.26.29.73 of WhatsApp on Android has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is WhatsApp affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting WhatsApp (com.whatsapp) is currently in the CISA KEV catalog.
What is the latest known version of WhatsApp?
The most recent version of WhatsApp (com.whatsapp) tracked by Appaloosa Scout is 2.26.29.73, published by WhatsApp LLC.