CVE-2025-5715 | Low | 3.8 | 2025-06-06 | A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biomet… |
CVE-2023-24069 | Low | 3.3 | 2023-01-23 | Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially sensitive attachments sent in messages from the attachments.n… |
CVE-2023-24068 | High | 7.8 | 2023-01-23 | Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify conversation attachments within the attachments.noindex directory. Client… |
CVE-2022-28345 | High | 7.5 | 2022-04-15 | The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders RTLO encoded URLs beginning with a non-breaking space, when t… |
CVE-2020-5753 | Medium | 5.3 | 2020-05-20 | Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used… |
CVE-2019-19954 | High | 7.3 | 2019-12-24 | Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmic.exe file. |
CVE-2019-17192 | Critical | 9.8 | 2019-10-05 | The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a callee chooses to… |
CVE-2019-17191 | High | 7.5 | 2019-10-05 | The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user interaction, via a conne… |
CVE-2019-9970 | Medium | 6.5 | 2019-03-24 | Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerable to an IDN homogr… |
CVE-2018-3988 | Medium | 4.7 | 2018-12-10 | Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attac… |
CVE-2018-16132 | High | 8.6 | 2018-08-29 | The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before… |
CVE-2018-14023 | Medium | 4.0 | 2018-08-20 | Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage. |
CVE-2018-11101 | Medium | 6.1 | 2018-05-17 | Open Whisper Signal (aka Signal-Desktop) through 1.10.1 allows XSS via a resource location specified in an attribute of a SCRIPT, IFRAME, or IMG element, leadi… |
CVE-2018-10994 | Medium | 6.1 | 2018-05-14 | js/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) before 1.10.1 allows XSS via a URL. |
CVE-2018-9840 | Medium | 6.8 | 2018-04-10 | The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via certain rapid sequences of acti… |