CVE-2021-24030

—

CVSS 3.1

9.8 critical

EPSS

2%p76

Published

Mar 10, 2021 (Mar 10, 2021)

Modified

Jun 17, 2026

Description

The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allows a malicious URL to cause code execution. This issue affects versions prior to v1.26.0.

Vendors: facebook
Products: gameroom
Weakness: CWE-88
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.