MP
Vendor
Meta Platforms, Inc
16
CVEs
0
On KEV
3
New 30D
Products
MH9.1
Meta Horizon OS
Meta Platforms, Inc
2 CVEs0 on KEV2 new
SS7.8
Sapling SCM
Meta Platforms, Inc
1 CVEs0 on KEV1 new
EX9.8
ExecuTorch
Meta Platforms, Inc
7 CVEs0 on KEV0 new
LS6.3
Llama Stack
Meta Platforms, Inc
2 CVEs0 on KEV0 new
BE6.8
below
Meta Platforms, Inc
1 CVEs0 on KEV0 new
LE6.1
Lexical
Meta Platforms, Inc
1 CVEs0 on KEV0 new
MS7.8
Meta Spark Studio
Meta Platforms, Inc
1 CVEs0 on KEV0 new
MO7.5
moxygen
Meta Platforms, Inc
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104026 | SS Sapling SCM Meta Platforms, Inc | 7.8 | Oct 2 | In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs |
| CVE-2026-92172 | MH Meta Horizon OS Meta Platforms, Inc | 8.8 | Sep 30 | Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a privileged PendingIntent including a com.oculus.horizon CallerIdentity to an arbitrary… |
| CVE-2026-92173 | MH Meta Horizon OS Meta Platforms, Inc | 9.1 | Sep 30 | Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell CallerIdentity to an… |
| CVE-2026-84894 | MO moxygen Meta Platforms, Inc | 7.5 | Sep 28 | In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's… |
| CVE-2025-55178 | LS Llama Stack Meta Platforms, Inc | 5.3 | Sep 24 | Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution |
| CVE-2025-54952 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potentially resulting in code execution or… |
| CVE-2025-54951 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable… |
| CVE-2025-54950 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects |
| CVE-2025-54949 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects |
| CVE-2025-30405 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution… |
| CVE-2025-30404 | EX ExecuTorch Meta Platforms, Inc | 9.8 | Aug 7 | An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects |
| CVE-2025-30402 | EX ExecuTorch Meta Platforms, Inc | 8.1 | Jul 11 | A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects |
| CVE-2025-27591 | BE below Meta Platforms, Inc | 6.8 | Mar 11 | A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below |
| CVE-2024-50050 | LS Llama Stack Meta Platforms, Inc | 6.3 | Oct 23 | Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket communication, potentially allowing for remote code… |
| CVE-2024-23347 | MS Meta Spark Studio Meta Platforms, Inc | 7.8 | Jan 16 | Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project |
| CVE-2023-30792 | LE Lexical Meta Platforms, Inc | 6.1 | Apr 29 | Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted… |