<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>pwn.watch: Meta incident updates</title>
  <link>https://pwn.watch/t/meta</link>
  <description>Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them.</description>
  <language>en</language>
  <lastBuildDate>Tue, 02 Sep 2025 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/t/meta/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>[medium] Meta Platforms WhatsApp: WhatsApp Incorrect Authorization Vulnerability</title>
    <link>https://pwn.watch/i/meta-platforms-whatsapp-cve-2025-55177</link>
    <guid isPermaLink="true">https://pwn.watch/i/meta-platforms-whatsapp-cve-2025-55177</guid>
    <pubDate>Tue, 02 Sep 2025 00:00:00 GMT</pubDate>
    <category>medium</category>
    <description>&lt;p&gt;Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. Added to CISA KEV on 2025-09-02.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; closed · &lt;strong&gt;Patch:&lt;/strong&gt; patched · &lt;strong&gt;Fixed in:&lt;/strong&gt; See vendor advisory linked in sources&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Latest updates:&lt;/strong&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;2025-09-02: CISA added CVE-2025-55177 to the KEV catalog (due 2025-09-23).&lt;/li&gt;&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;CVEs:&lt;/strong&gt; CVE-2025-55177&lt;/p&gt;</description>
  </item>
</channel>
</rss>
