Unrated severityCISA KEVNVD Advisory· Published Jan 21, 2020· Updated Oct 21, 2025
CVE-2019-18426
CVE-2019-18426
Description
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<0.3.9309+ 1 more
- (no CPE)range: <0.3.9309
- (no CPE)range: 0.3.9309
- Range: <2.20.10
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/157097/WhatsApp-Desktop-0.3.9308-Cross-Site-Scripting.htmlmitrex_refsource_MISC
- www.facebook.com/security/advisories/cve-2019-18426mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.