Known Vulnerabilities for products from Facebook
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Facebook".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110384 json | Not Provided | 2026-10-17 | 2026-10-18 | |
| CVE-2026-97303 json | Not Provided | 2026-10-05 | 2026-10-06 | |
| CVE-2026-93756 json | Not Provided | 2026-10-02 | 2026-10-03 | |
| CVE-2026-92161 json | Not Provided | 2026-09-25 | 2026-09-29 | |
| CVE-2026-86720 json | Not Provided | 2026-09-08 | 2026-09-08 | |
| CVE-2026-83561 json | Not Provided | 2026-09-18 | 2026-09-18 | |
| CVE-2026-82645 json | Not Provided | 2026-08-30 | 2026-08-31 | |
| CVE-2026-77826 json | Not Provided | 2026-09-05 | 2026-09-06 | |
| CVE-2026-73683 json | Not Provided | 2026-08-14 | 2026-08-18 | |
| CVE-2026-66707 json | Not Provided | 2026-08-06 | 2026-08-08 | |
| CVE-2026-23870 json | A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints,... | Not Provided | 2026-05-06 | 2026-08-12 |
| CVE-2026-23864 json | Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages: react-server-d... | Not Provided | 2026-01-26 | 2026-07-15 |
| CVE-2025-67779 json | It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial o... | Not Provided | 2025-12-12 | 2026-10-07 |
| CVE-2025-55184 json | A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1... | Not Provided | 2025-12-11 | 2026-10-07 |
| CVE-2025-55182 json | A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, a... | Not Provided | 2025-12-03 | 2026-10-18 |
| CVE-2025-55181 json | Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroS... | Not Provided | 2025-12-02 | 2026-10-18 |
| CVE-2024-23347 json | 7.8 - HIGH | 2024-01-16 | 2024-01-30 | |
| CVE-2023-49062 json | 7.5 - HIGH | 2023-11-28 | 2023-12-04 | |
| CVE-2023-45239 json | A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allo... | 9.8 - CRITICAL | 2023-10-06 | 2023-11-07 |
| CVE-2023-30792 json | Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks ... | 6.1 - MEDIUM | 2023-04-29 | 2023-11-07 |
Known software with vulnerabilities from Facebook
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Al Jazeera | 6 | |
| Application | Arabic Troll Football | 1.0.1 | |
| Application | Barcode Scanner | 2.3.0 | |
| Application | Best Beginning | 2 | |
| Application | Bilingual Magic Ball | 0.1 | |
| Application | Bilingual Magic Ball Relajo | 0.1 | |
| Application | Bite It! | 1.1.8 | |
| Application | Buck | 2015.09.10.01 | |
| Application | Create-react-app | 0.5.0 | |
| Application | Facebook For Woocommerce | 1.9.11 | |
| Application | Facebook Platform | 1.0 | |
| Application | Face Fun Photo Collage Maker 2 | 1.3.0 | |
| Application | Fire Equipments Screen Lock | 1.1 | |
| Application | Fizz | 2018.09.24.00 | |
| Application | Folly | 0.22.0 | |
| Application | Hermes | - | |
| Application | Hhvm | 2.2.0 | |
| Application | Hiphop Virtual Machine | 2.2.0 | |
| Application | Hunting Trophy Whitetails | 0.75.13441.88885 | |
| Application | - |