CVE-2025-30401

Katalog CVE

CVSS 6.7 · Medium EPSS 21,0%

Kerentanan pada whatsapp. Skor CVSS 3.1 6.7 (Medium) menurut CISA ADP.

Deskripsi (NVD)

A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file opening handler based on the attachment’s filename extension. A maliciously crafted mismatch could have caused the recipient to inadvertently execute arbitrary code rather than view the attachment when manually opening the attachment inside WhatsApp. We have not seen evidence of exploitation in the wild.

Rincian

Terbit di NVD

5 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L · uraikan di kalkulator

EPSS (30 hari)

21,0% peluang dieksploitasi; lebih tinggi dari 97,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.facebook.com/security/advisories/cve-2025-30401 advisory pihak ketiga
• https://www.whatsapp.com/security/advisories/2025/