Unrated severityCISA KEVNVD Advisory· Published Jan 21, 2020· Updated Oct 21, 2025
CVE-2019-18426
CVE-2019-18426
Description
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message.
Affected products
1- Facebook/WhatsApp Desktopv5Range: 0.3.9309
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- packetstormsecurity.com/files/157097/WhatsApp-Desktop-0.3.9308-Cross-Site-Scripting.htmlmitrex_refsource_MISC
- www.facebook.com/security/advisories/cve-2019-18426mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.