{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Meta vulnerabilities","home_page_url":"https://patchfirst.co/vendor/meta/","feed_url":"https://patchfirst.co/feed/vendor/meta.json","description":"New and newly exploited Meta CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-55184","url":"https://patchfirst.co/cve/CVE-2025-55184/","title":"CVE-2025-55184: A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0…","content_text":"Meta · react-server-dom-webpack. Not in CISA KEV. EPSS 66.6% (higher than 99.29% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 72.3 of 100.","summary":"A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0…","date_published":"2025-12-11T00:00:00.000Z","date_modified":"2025-12-15T16:37:06.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":72.3,"kev":null,"epss":{"score":0.66615,"percentile":0.99286},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Meta","product":"react-server-dom-webpack","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-55183","url":"https://patchfirst.co/cve/CVE-2025-55183/","title":"CVE-2025-55183: An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1…","content_text":"Meta · react-server-dom-webpack. Not in CISA KEV. EPSS 64.2% (higher than 99.23% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. Priority 30.6 of 100.","summary":"An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1…","date_published":"2025-12-11T00:00:00.000Z","date_modified":"2026-01-07T16:26:47.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":30.6,"kev":null,"epss":{"score":0.64233,"percentile":0.99229},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Meta","product":"react-server-dom-webpack","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-55182#kev","url":"https://patchfirst.co/cve/CVE-2025-55182/","title":"[KEV] CVE-2025-55182: Meta React Server Components Remote Code Execution Vulnerability","content_text":"Meta · React Server Components. In CISA KEV since 2025-12-05, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 5 threat reports. Priority 95.0 of 100.","summary":"Meta React Server Components Remote Code Execution Vulnerability","date_published":"2025-12-05T00:00:00.000Z","date_modified":"2026-10-18T17:10:00.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":95,"kev":{"dateAdded":"2025-12-05","ransomware":true},"epss":{"score":0.99802,"percentile":0.99958},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Meta","product":"React Server Components","techniqueIds":["T1190","T1059"],"reportCount":5,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-55177#kev","url":"https://patchfirst.co/cve/CVE-2025-55177/","title":"[KEV] CVE-2025-55177: Meta Platforms WhatsApp Incorrect Authorization Vulnerability","content_text":"Meta Platforms · WhatsApp. In CISA KEV since 2025-09-02. ENISA EUVD lists it as exploited. EPSS 13.5% (higher than 96.4% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 66.1 of 100.","summary":"Meta Platforms WhatsApp Incorrect Authorization Vulnerability","date_published":"2025-09-02T00:00:00.000Z","date_modified":"2026-10-18T21:10:00.000Z","tags":["kev","public-exploit","T1190","T1105"],"_patchfirst":{"reason":"kev","priority":66.1,"kev":{"dateAdded":"2025-09-02","ransomware":false},"epss":{"score":0.13513,"percentile":0.96445},"cvss":{"score":5.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Meta Platforms","product":"WhatsApp","techniqueIds":["T1190","T1105"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-30259","url":"https://patchfirst.co/cve/CVE-2025-30259/","title":"CVE-2025-30259: The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox…","content_text":"Meta · WhatsApp cloud service. Not in CISA KEV. EPSS 0.3% (higher than 17.9% of CVEs). CVSS 3.5 LOW. Priority 41.0 of 100.","summary":"The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox…","date_published":"2025-03-19T00:00:00.000Z","date_modified":"2025-03-20T20:36:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":41,"kev":null,"epss":{"score":0.00261,"percentile":0.17942},"cvss":{"score":3.5,"severity":"LOW","version":"3.1"},"vendor":"Meta","product":"WhatsApp cloud service","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-18426#kev","url":"https://patchfirst.co/cve/CVE-2019-18426/","title":"[KEV] CVE-2019-18426: WhatsApp Cross-Site Scripting Vulnerability","content_text":"Meta Platforms · WhatsApp. In CISA KEV since 2022-05-23. ENISA EUVD lists it as exploited. EPSS 67.9% (higher than 99.32% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1005 Data from Local System; T1059.007 JavaScript. Priority 78.6 of 100.","summary":"WhatsApp Cross-Site Scripting Vulnerability","date_published":"2022-05-23T00:00:00.000Z","date_modified":"2026-06-17T02:25:01.000Z","tags":["kev","public-exploit","T1204.001","T1005","T1059.007"],"_patchfirst":{"reason":"kev","priority":78.6,"kev":{"dateAdded":"2022-05-23","ransomware":false},"epss":{"score":0.67859,"percentile":0.99318},"cvss":{"score":8.2,"severity":"HIGH","version":"3.1"},"vendor":"Meta Platforms","product":"WhatsApp","techniqueIds":["T1204.001","T1005","T1059.007"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-3568#kev","url":"https://patchfirst.co/cve/CVE-2019-3568/","title":"[KEV] CVE-2019-3568: WhatsApp VOIP Stack Buffer Overflow Vulnerability","content_text":"Meta Platforms · WhatsApp. In CISA KEV since 2022-04-19. ENISA EUVD lists it as exploited. EPSS 30.1% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1210 Exploitation of Remote Services; T1059 Command and Scripting Interpreter. Priority 64.5 of 100.","summary":"WhatsApp VOIP Stack Buffer Overflow Vulnerability","date_published":"2022-04-19T00:00:00.000Z","date_modified":"2026-06-17T02:35:14.000Z","tags":["kev","T1210","T1059"],"_patchfirst":{"reason":"kev","priority":64.5,"kev":{"dateAdded":"2022-04-19","ransomware":false},"epss":{"score":0.30076,"percentile":0.98209},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Meta Platforms","product":"WhatsApp","techniqueIds":["T1210","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}}]}