CVE-2025-48066 | Medium | 6.0 | 2025-05-22 | wire-webapp is the web application for the open-source messaging service Wire. A bug fix caused a regression causing an issue with function to delete local dat… |
CVE-2023-48221 | High | 7.3 | 2023-11-20 | wire-avs provides Audio, Visual, and Signaling (AVS) functionality sure the secure messaging software Wire. Prior to versions 9.2.22 and 9.3.5, a remote format… |
CVE-2023-22737 | Medium | 6.5 | 2023-01-28 | wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation c… |
CVE-2022-39380 | Medium | 5.3 | 2023-01-27 | Wire web-app is part of Wire communications. Versions prior to 2022-11-02 are subject to Improper Handling of Exceptional Conditions. In the wire-webapp, certa… |
CVE-2022-43673 | Medium | 4.7 | 2022-11-18 | Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of time) from the AppD… |
CVE-2022-31122 | Critical | 9.8 | 2022-10-18 | Wire is an encrypted communication and collaboration platform. Versions prior to 2022-07-12/Chart 4.19.0 are subject to Token Recipient Confusion. If an attack… |
CVE-2022-29168 | Critical | 9.6 | 2022-06-25 | Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering `@mentions` in t… |
CVE-2022-31009 | Medium | 5.7 | 2022-06-23 | wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partia… |
CVE-2022-24799 | Critical | 9.6 | 2022-04-20 | wire-webapp is the web application interface for the wire messaging service. Insufficient escaping in markdown “code highlighting” in the wire-webapp resulted… |
CVE-2021-41119 | Medium | 5.3 | 2022-04-13 | Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object c… |
CVE-2022-23610 | Critical | 9.1 | 2022-03-16 | wire-server provides back end services for Wire, an open source messenger. In versions of wire-server prior to the 2022-01-27 release, it was possible to craft… |
CVE-2022-23625 | Medium | 6.5 | 2022-03-11 | Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iO… |
CVE-2021-41193 | Critical | 9.8 | 2022-03-01 | wire-avs is the audio visual signaling (AVS) component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allo… |
CVE-2022-23605 | Medium | 4.4 | 2022-02-04 | Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired ephemeral messages were not reliably removed… |
CVE-2021-41100 | High | 7.4 | 2021-10-04 | Wire-server is the backing server for the open source wire secure messaging application. In affected versions it is possible to trigger email address change of… |
CVE-2021-41094 | Medium | 4.2 | 2021-10-04 | Wire is an open source secure messenger. Users of Wire by Bund may bypass the mandatory encryption at rest feature by simply disabling their device passcode. U… |
CVE-2021-41093 | High | 7.4 | 2021-10-04 | Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an account by changing t… |
CVE-2021-41101 | Medium | 5.7 | 2021-09-30 | wire-server is an open-source back end for Wire, a secure collaboration platform. Before version 2.106.0, the CORS ` Access-Control-Allow-Origin ` header set b… |
CVE-2021-32755 | Medium | 5.4 | 2021-07-13 | Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In t… |
CVE-2021-32683 | High | 8.8 | 2021-06-15 | wire-webapp is the web version of Wire, an open-source messenger. A cross-site scripting vulnerability exists in wire-webapp prior to version 2021-06-01-produc… |
CVE-2021-21382 | High | 8.6 | 2021-06-11 | Restund is an open source NAT traversal server. The restund TURN server can be instructed to open a relay to the loopback address range. This allows you to rea… |
CVE-2021-32666 | Medium | 6.5 | 2021-06-03 | wire-ios is the iOS version of Wire, an open-source secure messaging app. In wire-ios versions 3.8.0 and prior, a vulnerability exists that can cause a denial… |
CVE-2021-32665 | High | 8.8 | 2021-06-03 | wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incor… |
CVE-2021-21400 | High | 7.1 | 2021-04-02 | wire-webapp is an open-source front end for Wire, a secure collaboration platform. In wire-webapp before version 2021-03-15-production.0, when being prompted t… |
CVE-2021-21396 | Medium | 6.5 | 2021-03-26 | wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the cli… |
CVE-2021-21301 | Low | 2.6 | 2021-02-11 | Wire is an open-source collaboration platform. In Wire for iOS (iPhone and iPad) before version 3.75 there is a vulnerability where the video capture isn't sto… |
CVE-2020-27853 | Critical | 9.8 | 2020-10-27 | Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a format string. This af… |
CVE-2020-15258 | High | 8.0 | 2020-10-16 | In Wire before 3.20.x, `shell.openExternal` was used without checking the URL. This vulnerability allows an attacker to execute code on the victims machine by… |
CVE-2018-8909 | High | 7.5 | 2018-03-22 | The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a filename of a recei… |