ctrlINT What the industry said about every indicator, with the quote

CVE-2025-55177Vulnerability

Meta Platforms WhatsApp Incorrect Authorization Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 2 independent sources · first reported by SecurityWeek · last reported

Last reported 25 days ago

CISA KEVAdded 2 Sep 2025
Fix due 23 Sep 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS4.7%
higher than 91% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

2 reports, newest first · the exact sentence from each

  1. “Last year, WhatsApp disclosed that a vulnerability in its iOS and macOS applications, tracked as CVE-2025-55177, was likely chained with Apple’s ImageIO zero-day CVE-2025-43300 in zero-click attacks against fewer than 200 users.”

    Security AffairsNews
    Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

  2. “…a’s involvement is noteworthy given a similar incident from last year, when WhatsApp said a vulnerability in its iOS and macOS apps (CVE-2025-55177) was likely used alongside the Apple ImageIO zero-day CVE-2025-43300 in zero-click attacks aimed at fewer than 200 users.”

    SecurityWeekNews
    Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’

Indicators reported together

named in the same reports

Also named with it: CVE-2026-86950, CVE-2025-43300, CVE-2026-65660, CVE-2026-20700

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2025-55177 here?
No account needed. We do not store your IP address.