CVE-2025-5715

all versions

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown

3.8LOW

CVE-2023-24069

<= 6.2.0

Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially sensitive attachments sent in me

3.3LOW

CVE-2023-24068

<= 6.2.0

Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify conversation attachments within the attachme

7.8HIGH

CVE-2022-28345

< 5.34

The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders RTLO encoded URLs beginning with

7.5HIGH

CVE-2020-5753

<= 4.59.0

Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phon

5.3MEDIUM

CVE-2019-19954

< 1.29.1

Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_module

7.3HIGH

CVE-2019-17192

<= 4.47.7

The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packet

9.8CRITICAL

CVE-2019-17191

< 4.47.7

The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee

7.5HIGH

CVE-2019-9970

<= 1.23.1

Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android ar

6.5MEDIUM

CVE-2018-3988

all versions

Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo fe

4.7MEDIUM

CVE-2018-16132

<= 2.29.0

The image rendering component (createGenericPreview) of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unre

8.6HIGH

CVE-2018-14023

< 1.15.0

Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.

4.0MEDIUM

CVE-2018-11101

<= 1.10.1

Open Whisper Signal (aka Signal-Desktop) through 1.10.1 allows XSS via a resource location specified in an attribute of a SCRIPT,

6.1MEDIUM

CVE-2018-10994

< 1.10.1

js/views/message_view.js in Open Whisper Signal (aka Signal-Desktop) before 1.10.1 allows XSS via a URL.

6.1MEDIUM

CVE-2018-9840

< 2.23.2

The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via ce

6.8MEDIUM