CVE-2025-30259
CVE-2025-30259
Título es
CVE-2025-30259
Jue, 20/03/2025 – 00:15
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2025-30259
Descripción en
The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.
20/03/2025
20/03/2025
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
Gravedad 3.1 (CVSS 3.1 Base Score)
3.50
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
LOW
Referencias
Virtue or Vice? A First Look at Paragon’s Proliferating Spyware Operations
https://www.bleepingcomputer.com/news/security/whatsapp-patched-zero-day-flaw-used-in-paragon-spyware-attacks/
Enviar en el boletín
Off
