CVE-2025-55177Published

Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing …

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2025-55177

Published

WhatsApp Desktop for Mac

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "defaultStatus": "unaffected",
                    "product": "WhatsApp Desktop for Mac",
                    "vendor": "Facebook",
                    "versions": [
                        {
                            "lessThan": "2.25.21.78",
                            "status": "affected",
                            "version": "2.22.25.2",
                            "versionType": "semver"
                        }
                    ]
                }

WhatsApp Business for iOS

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "defaultStatus": "unaffected",
                    "product": "WhatsApp Business for iOS",
                    "vendor": "Facebook",
                    "versions": [
                        {
                            "lessThan": "2.25.21.78",
                            "status": "affected",
                            "version": "2.22.25.2",
                            "versionType": "semver"
                        }
                    ]
                }

WhatsApp for iOS

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "defaultStatus": "unaffected",
                    "product": "WhatsApp for iOS",
                    "vendor": "Facebook",
                    "versions": [
                        {
                            "lessThan": "2.25.21.73",
                            "status": "affected",
                            "version": "2.22.25.2",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON