CVE-2019-18426

Published: 2020-01-21T21:15Z

Last Modified: 2025-03-21T19:40Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt