Security Risk Profile
33
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 54 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 18, 2017 to present
54
Total CVEs
29
Critical+High
5
Exploited
28
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
28
Critical/High
Risk Level
33/100
low
⚠️ 5 Active Exploits⚡ 2 Zero-Days📈 2 in Last 30 Days
Severity Distribution
Critical
16High
13Medium
18Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
6
2
XSS
3
3
Use After Free
3
4
Input Validation
3
5
Race Condition
2
Most Affected Products
1. WhatsApp Whatsapp Android38
2. WhatsApp Whatsapp Iphone Os30
3. WhatsApp Whatsapp Business Android20
4. WhatsApp Whatsapp Business Iphone Os16
5. WhatsApp WhatsApp11
Recent Vulnerabilities
See more →CVE-2026-23866
CVSS 4.3medium
5/1/2026🔧 No Patch
CVE-2026-23863
CVSS 6.5medium
5/1/2026🔧 No Patch
CVE-2025-55179
CVSS 5.4medium
11/18/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/new-android-spyware-clayrat-imitates-whatsapp-tiktok-youtube/
unknown
New Android spyware ClayRat imitates WhatsApp, TikTok, YouTube
10/9/2025🔧 No Patch
https://reddit.com/r/cybersecurity/comments/1n3f8ls/whatsapp_fixed_a_new_vulnerability_that_in/
unknown
WhatsApp fixed a new vulnerability that "in combination with an OS-level vulnerability on Apple platforms, may have been exploited in a sophisticated attack against specific targeted users"
8/29/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/whatsapp-patches-vulnerability-exploited-in-zero-day-attacks/
unknown
WhatsApp patches vulnerability exploited in zero-day attacks
8/29/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2025-55177
CVSS 5.4medium
Meta Platforms WhatsApp Incorrect Authorization Vulnerability
8/29/2025⚠ Exploited
CVE-2025-30401
CVSS 6.7medium
4/5/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/whatsapp-patched-zero-day-flaw-used-in-paragon-spyware-attacks/
unknown
WhatsApp patched zero-click flaw exploited in Paragon spyware attacks
3/19/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2025-30259
CVSS 3.5EPSS 0%low
3/19/2025🔧 No Patch
Monitor WhatsApp in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.