CVEs we hold for Facebook

Records whose assigning authority named Facebook as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-68508Hydra: hydra.utils.instantiate with untrusted config can lead to code executionfacebookresearch hydra

CVE-2026-66707WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerabilityFacebook for WooCommerce

CVE-2026-66705WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerabilityFacebook for WordPress

CVE-2026-49059WordPress Facebook for WooCommerce plugin <= 3.7.0 - Open Redirection vulnerabilityFacebook for WooCommerce

CVE-2026-44909no title heldFacebook proxygen

CVE-2026-23866no title heldFacebook WhatsApp for iOS

CVE-2026-23863no title heldFacebook WhatsApp Desktop for Windows

CVE-2025-64296WordPress Facebook for WooCommerce plugin <= 3.5.7 - Broken Access Control to Notice Dismissal vulnerabilityFacebook for WooCommerce

CVE-2025-55181no title heldFacebook proxygen

CVE-2025-55179no title heldFacebook WhatsApp Desktop for Mac

CVE-2025-55177no title heldFacebook WhatsApp for iOS

CVE-2025-30403no title heldFacebook mvfst

CVE-2025-30401no title heldFacebook WhatsApp Desktop for Windows

CVE-2024-45863no title heldFacebook Thrift

CVE-2024-45773no title heldFacebook Thrift

CVE-2023-49062no title heldFacebook Katran

CVE-2023-38538no title heldFacebook WhatsApp for Android

CVE-2023-38537no title heldFacebook WhatsApp for Android

CVE-2023-30470no title heldFacebook Hermes

CVE-2023-28753no title heldFacebook netconsd

CVE-2023-28081no title heldFacebook Hermes

CVE-2023-25933no title heldFacebook Hermes

CVE-2023-24833no title heldFacebook Hermes

CVE-2023-24832no title heldFacebook Hermes

CVE-2023-23759no title heldFacebook fizz

CVE-2023-23557no title heldFacebook Hermes

CVE-2023-23556no title heldFacebook Hermes

CVE-2022-40138no title heldFacebook Hermes

CVE-2022-36938no title heldFacebook Redex

CVE-2022-36937no title heldFacebook HHVM

CVE-2022-35289no title heldFacebook Hermes

CVE-2022-32234no title heldFacebook Hermes

CVE-2022-27810no title heldFacebook Hermes

CVE-2021-39207Deserialization of Untrusted Data in parlaifacebookresearch ParlAI

CVE-2021-24218Facebook for WordPress 3.0.0-3.0.3 - CSRF to Stored XSS and Settings DeletionUnknown Facebook for WordPress

CVE-2021-24217Facebook for WordPress < 3.0.0 - PHP Object Injection with POP ChainUnknown Facebook for WordPress

CVE-2021-24045no title heldFacebook Hermes

CVE-2021-24044no title heldFacebook Hermes

CVE-2021-24042no title heldFacebook WhatsApp for Android

CVE-2021-24041no title heldFacebook WhatsApp for Android

CVE-2021-24040no title heldFacebook ParlAI

CVE-2021-24038no title heldFacebook Oculus Desktop

CVE-2021-24037no title heldFacebook Hermes

CVE-2021-24036no title heldFacebook HHVM

CVE-2021-24035no title heldFacebook WhatsApp for Android

CVE-2021-24033no title heldFacebook react-dev-utils

CVE-2021-24032no title heldFacebook Zstandard

CVE-2021-24031no title heldFacebook Zstandard

CVE-2021-24030no title heldFacebook Gameroom

CVE-2021-24029no title heldFacebook proxygen

CVE-2021-24028no title heldFacebook Thrift

CVE-2021-24027no title heldFacebook WhatsApp for Android

CVE-2021-24026no title heldFacebook WhatsApp for Android

CVE-2021-24025no title heldFacebook HHVM

CVE-2020-36838Facebook Chat Plugin <= 1.5 - Missing Capabilities CheckFacebook Chat Plugin – Live Chat Plugin for WordPress

CVE-2020-1921no title heldFacebook HHVM

CVE-2020-1920no title heldFacebook react-native

CVE-2020-1919no title heldFacebook HHVM

CVE-2020-1918no title heldFacebook HHVM

CVE-2020-1917no title heldFacebook HHVM

CVE-2020-1916no title heldFacebook HHVM

CVE-2020-1915no title heldFacebook Hermes

CVE-2020-1914no title heldFacebook Hermes

CVE-2020-1913no title heldFacebook Hermes

CVE-2020-1912no title heldFacebook Hermes

CVE-2020-1911no title heldFacebook Hermes

CVE-2020-1909no title heldFacebook WhatsApp for iOS

CVE-2020-1908no title heldFacebook WhatsApp for iOS

CVE-2020-1907no title heldFacebook WhatsApp for Portal

CVE-2020-1906no title heldFacebook WhatsApp Business for Android

CVE-2020-1905no title heldFacebook WhatsApp for Android

CVE-2020-1904no title heldFacebook WhatsApp Business for iOS

CVE-2020-1903no title heldFacebook WhatsApp Business for iOS

CVE-2020-1902no title heldFacebook WhatsApp Business for Android

CVE-2020-1901no title heldFacebook WhatsApp for iOS

CVE-2020-1900no title heldFacebook HHVM

CVE-2020-1899no title heldFacebook HHVM

CVE-2020-1898no title heldFacebook HHVM

CVE-2020-1897no title heldFacebook proxygen

CVE-2020-1896no title heldFacebook Hermes

CVE-2020-1895no title heldFacebook Instagram for Android

CVE-2020-1894no title heldFacebook WhatsApp Business for iPhone

CVE-2020-1893no title heldFacebook HHVM

CVE-2020-1892no title heldFacebook HHVM

CVE-2020-1891no title heldFacebook WhatsApp Business for iPhone

CVE-2020-1890no title heldFacebook WhatsApp Business for Android

CVE-2020-1889no title heldFacebook WhatsApp Desktop

CVE-2020-1888no title heldFacebook HHVM

CVE-2020-1887no title heldFacebook Osquery

CVE-2020-1886no title heldFacebook WhatsApp Business for Android

CVE-2020-1885no title heldFacebook Oculus Desktop

CVE-2019-3571no title heldFacebook WhatsApp Desktop

CVE-2019-3570no title heldFacebook HHVM

CVE-2019-3569no title heldFacebook HHVM

CVE-2019-3568no title heldFacebook WhatsApp for Tizen

CVE-2019-3567no title heldFacebook osquery

CVE-2019-3566no title heldFacebook WhatsApp Business for Android

CVE-2019-3565no title heldFacebook Thrift

CVE-2019-3564no title heldFacebook Thrift

CVE-2019-3563no title heldFacebook Wangle

CVE-2019-3561no title heldFacebook HHVM

CVE-2019-3560no title heldFacebook fizz

CVE-2019-3559no title heldFacebook Thrift

CVE-2019-3558no title heldFacebook Thrift

CVE-2019-3557no title heldFacebook HHVM

CVE-2019-3556no title heldFacebook HHVM

CVE-2019-3554no title heldFacebook Wangle

CVE-2019-3553no title heldFacebook Thrift

CVE-2019-3552no title heldFacebook Thrift

CVE-2019-18426no title heldFacebook WhatsApp Desktop

CVE-2019-11940no title heldFacebook Proxygen

CVE-2019-11939no title heldFacebook Thrift

CVE-2019-11938no title heldFacebook Thrift

CVE-2019-11937no title heldFacebook Mcrouter

CVE-2019-11936no title heldFacebook HHVM

CVE-2019-11935no title heldFacebook HHVM

CVE-2019-11934no title heldFacebook folly

CVE-2019-11933no title heldFacebook WhatsApp for Android

CVE-2019-11931no title heldFacebook WhatsApp Business for iOS

CVE-2019-11930no title heldFacebook HHVM

CVE-2019-11929no title heldFacebook HHVM

CVE-2019-11928no title heldFacebook WhatsApp Desktop

CVE-2019-11927no title heldFacebook WhatsApp for iOS

CVE-2019-11926no title heldFacebook HHVM

CVE-2019-11925no title heldFacebook HHVM

CVE-2019-11924no title heldFacebook fizz

CVE-2019-11923no title heldFacebook Mcrouter

CVE-2019-11922no title heldFacebook Zstandard

CVE-2019-11921no title heldFacebook Proxygen

CVE-2018-6350no title heldFacebook WhatsApp for Windows Phone

CVE-2018-6349no title heldFacebook WhatsApp Business for Android

CVE-2018-6347no title heldFacebook Proxygen

CVE-2018-6346no title heldFacebook Proxygen

CVE-2018-6345no title heldFacebook HHVM

CVE-2018-6344no title heldFacebook WhatsApp for Windows Phone

CVE-2018-6343no title heldFacebook Proxygen

CVE-2018-6342no title heldFacebook react-dev-utils

CVE-2018-6341no title heldFacebook react-dom

CVE-2018-6340no title heldFacebook HHVM

CVE-2018-6339no title heldFacebook WhatsApp Business for Android

CVE-2018-6337no title heldFacebook folly

CVE-2018-6336no title heldFacebook osquery

CVE-2018-6335no title heldFacebook HHVM

CVE-2018-6334no title heldFacebook HHVM

CVE-2018-6333no title heldFacebook Nuclide

CVE-2018-6332no title heldFacebook HHVM

CVE-2018-6331no title heldFacebook Buck

CVE-2018-20655no title heldFacebook WhatsApp Business for iOS

CVE-2015-7265no title heldn/a Facebook Proxygen before 2015-11-09

CVE-2015-7264no title heldn/a Facebook Proxygen before 2015-11-09

CVE-2015-7263no title heldn/a Facebook Proxygen before 2015-11-09

151 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.