Vulnerabilitymedium

WhatsApp discloses six previously undisclosed flaws

Security Affairsby @securityaffairsSep 6, 2020 · 09:45 UTC (Sep 6, 2020)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-1894 CVE-2020-1891 CVE-2020-1890 CVE-2020-1889 CVE-2020-1886 CVE-2019-11928

Tags: cve-2020-1894 cve-2020-1891 cve-2020-1890 cve-2020-1889 cve-2020-1886 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-1889 +1 related CVE CVE-2019-11928	A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege…	10.0 group max	5%		Sep 3, 2020
CVE-2020-1891 +3 related CVEs CVE-2020-1894 CVE-2020-1886 CVE-2020-1890	A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone…	9.8 group max	1%		Sep 3, 2020

From the original article

2 min read at securityaffairs.com

WhatsApp addressed six previously undisclosed flaws in its app and disclosed them on a new dedicated security advisory site. WhatsApp announced more transparency about the vulnerabilities affecting its app and will publicly disclose them to the users. The company addressed six previously undisclosed flaws in its app and disclosed them on a new dedicated web site .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.