Vulnerabilities CVE-2025-55177

CVE-2025-55177

Medium

Open

KEV

TLP:CLEAR

Meta Platforms WhatsApp Incorrect Authorization Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Meta Platforms — WhatsApp — Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.

Details

EPSS Score ⓘ: 4.21%

90th percentile
Confidence: 100%
CISA KEV
Date Added: Sep 2, 2025
Patch Due: Sep 23, 2025
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.