CVE-2020-1889 - A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process

Back Back to CVE browser

CRITICAL

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process

Published Sep 3, 2020

10.0

CRITICAL

CVSS 3.1

EPSS 4.78%

Description

A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process.

Affected products

Vendor Facebook Product WhatsApp Desktop Default
n/a
- Version
  0.3.4932
  Status
  affected
  Constraints
  -
- Version
  unspecified
  Status
  affected
  Constraints
  <0.3.4932

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Facebook

WhatsApp Desktop

n/a

Version	Status	Constraints
0.3.4932	affected	-
unspecified	affected	<0.3.4932

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-265

References (1)

https://www.whatsapp.com/security/advisories/2020/
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://www.whatsapp.com/security/advisories/2020/		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner facebook

Published Sep 3, 2020

Updated Aug 4, 2024

Reserved Dec 2, 2019

Link CVE-2020-1889

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-1889

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-1889