Back to Database
Status published
Unknown
CVE-2019-18426
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when...
Vulnerability Description
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18426
Credits & Attribution
No credits recorded in the NVD database.
References
More from Facebook
View All →CVE-2025-64296
WordPress Facebook for WooCommerce plugin <= 3.5.7 - Broken Access Control to Notice Dismissal vulnerability
Medium
5.3
CVE-2025-55181
Sending an HTTP request/response body with greater than 2^31 bytes...
Medium
5.3
CVE-2025-55179
Incomplete validation of rich response messages in WhatsApp for iOS...
Medium
5.4
CVE-2025-55177
Incomplete authorization of linked device synchronization messages in WhatsApp for...
Medium
5.4
CVE-2025-30403
A heap-buffer-overflow vulnerability is possible in mvfst via a specially...
Unknown
0
Affected Vendor
Affected Software
WhatsApp Desktop
Vulnerable Versions:
0.3.9309, unspecified
Timeline
Official Publish:
January 21st, 2020
Last Modified:
October 21st, 2025
Added to House:
July 20th, 2026
CVSS Vectors
No vector data available