Skip to main content

Wire

26 CVEs product

Monthly

CVE-2025-48066 May 22, 18:15 MEDIUM PATCH This Month

wire-webapp is the web application for the open-source messaging service Wire. Rated medium severity (CVSS 6.0).

Information Disclosure Wire Webapp Wire
NVD GitHub
CVSS 3.1
6.0
EPSS
0.0%
CVE-2023-48221 Nov 20, 18:15 HIGH PATCH This Week

wire-avs provides Audio, Visual, and Signaling (AVS) functionality sure the secure messaging software Wire. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Denial Of Service Wire Audio Video And Signaling
NVD GitHub
CVSS 3.1
8.8
EPSS
0.9%
CVE-2023-22737 Jan 28, 00:15 MEDIUM PATCH This Month

wire-server provides back end services for Wire, a team communication and collaboration platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Wire
NVD GitHub
CVSS 3.1
6.5
EPSS
0.7%
CVE-2022-43673 Nov 18, 20:15 MEDIUM POC This Month

Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of time) from the. Rated medium severity (CVSS 4.7). Public exploit code available and no vendor patch available.

Information Disclosure Microsoft Wire
NVD
CVSS 3.1
4.7
EPSS
0.3%
CVE-2022-31122 Oct 18, 10:15 HIGH This Week

Wire is an encrypted communication and collaboration platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Wire Wire Server
NVD GitHub
CVSS 3.1
8.1
EPSS
0.6%
CVE-2022-29168 Jun 25, 07:15 MEDIUM This Month

Wire is a secure messaging application. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS RCE Docker Wire Webapp Wire
NVD GitHub
CVSS 3.1
6.1
EPSS
0.8%
CVE-2022-31009 Jun 23, 07:15 MEDIUM PATCH This Month

wire-ios is an iOS client for the Wire secure messaging application. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Apple Wire
NVD GitHub
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-24799 Apr 20, 18:15 MEDIUM PATCH This Month

wire-webapp is the web application interface for the wire messaging service. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS RCE Docker Wire Webapp Wire
NVD GitHub
CVSS 3.1
6.1
EPSS
1.0%
CVE-2022-23610 Mar 16, 18:15 HIGH This Week

wire-server provides back end services for Wire, an open source messenger. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Jwt Attack Wire Wire Server
NVD GitHub
CVSS 3.1
8.1
EPSS
0.7%
CVE-2022-23625 Mar 11, 18:15 MEDIUM PATCH This Month

Wire-ios is a messaging application using the wire protocol on apple's ios platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Apple Wire Wire Ios Transport
NVD GitHub
CVSS 3.1
6.5
EPSS
1.2%
CVE-2021-41100 Oct 04, 19:15 CRITICAL Act Now

Wire-server is the backing server for the open source wire secure messaging application. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Privilege Escalation Wire Wire Server
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2021-41094 Oct 04, 19:15 MEDIUM PATCH This Month

Wire is an open source secure messenger. Rated medium severity (CVSS 4.6), this vulnerability is no authentication required, low attack complexity. This Exposure of Resource to Wrong Sphere vulnerability could allow attackers to access resources from an unintended security context.

Information Disclosure Wire
NVD GitHub
CVSS 3.1
4.6
EPSS
0.2%
CVE-2021-41093 Oct 04, 19:15 CRITICAL PATCH Act Now

Wire is an open source secure messenger. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Wire
NVD GitHub
CVSS 3.1
9.8
EPSS
1.4%
CVE-2021-41101 Sep 30, 20:15 MEDIUM This Month

wire-server is an open-source back end for Wire, a secure collaboration platform. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wire Wire Server
NVD GitHub
CVSS 3.1
5.7
EPSS
0.7%
CVE-2021-32755 Jul 13, 21:15 MEDIUM This Month

Wire is a collaboration platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Apple Wire
NVD GitHub
CVSS 3.1
4.3
EPSS
0.3%
CVE-2021-32683 Jun 15, 20:15 MEDIUM POC PATCH This Month

wire-webapp is the web version of Wire, an open-source messenger. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Wire Webapp Wire
NVD GitHub
CVSS 3.1
6.1
EPSS
0.8%
CVE-2021-21382 Jun 11, 21:15 CRITICAL POC Act Now

Restund is an open source NAT traversal server. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wire Restund
NVD GitHub
CVSS 3.1
9.6
EPSS
1.5%
CVE-2021-32666 Jun 03, 22:15 MEDIUM PATCH This Month

wire-ios is the iOS version of Wire, an open-source secure messaging app. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Apple Wire
NVD GitHub
CVSS 3.1
6.5
EPSS
0.9%
CVE-2021-32665 Jun 03, 21:15 MEDIUM PATCH This Month

wire-ios is the iOS version of Wire, an open-source secure messaging app. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Apple Wire
NVD GitHub
CVSS 3.1
6.5
EPSS
0.5%
CVE-2021-29508 May 11, 17:15 NuGet CRITICAL POC Act Now

Due to how Wire handles type information in its serialization format, malicious payloads can be passed to a deserializer. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization Microsoft Wire
NVD GitHub
CVSS 3.1
9.1
EPSS
1.6%
CVE-2021-21400 Apr 02, 15:15 MEDIUM PATCH This Month

wire-webapp is an open-source front end for Wire, a secure collaboration platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Wire Webapp Wire
NVD GitHub
CVSS 3.1
6.5
EPSS
1.1%
CVE-2021-21396 Mar 26, 22:15 MEDIUM PATCH This Month

wire-server is an open-source back end for Wire, a secure collaboration platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nginx Wire Wire Server
NVD GitHub
CVSS 3.1
6.5
EPSS
1.1%
CVE-2021-21301 Feb 11, 18:15 MEDIUM PATCH This Month

Wire is an open-source collaboration platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Apple Wire
NVD GitHub
CVSS 3.1
4.3
EPSS
0.9%
CVE-2020-27853 Oct 27, 18:15 CRITICAL POC Act Now

Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a format string. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Google Wire Wire Audio Video And Signaling +1
NVD GitHub
CVSS 3.1
9.8
EPSS
3.8%
CVE-2020-15258 Oct 16, 17:15 HIGH POC PATCH This Week

In Wire before 3.20.x, `shell.openExternal` was used without checking the URL. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Wire
NVD GitHub
CVSS 3.1
8.0
EPSS
2.1%
CVE-2018-8909 Mar 22, 06:29 HIGH POC This Week

The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a filename of a received file, related to AssetService.scala. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Google Wire
NVD
CVSS 3.0
7.5
EPSS
2.0%
EPSS 0% CVSS 6.0
MEDIUM PATCH This Month

wire-webapp is the web application for the open-source messaging service Wire. Rated medium severity (CVSS 6.0).

Information Disclosure Wire Webapp Wire
NVD GitHub
EPSS 1% CVSS 8.8
HIGH PATCH This Week

wire-avs provides Audio, Visual, and Signaling (AVS) functionality sure the secure messaging software Wire. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Denial Of Service Wire +1
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

wire-server provides back end services for Wire, a team communication and collaboration platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Wire
NVD GitHub
EPSS 0% CVSS 4.7
MEDIUM POC This Month

Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of time) from the. Rated medium severity (CVSS 4.7). Public exploit code available and no vendor patch available.

Information Disclosure Microsoft Wire
NVD
EPSS 1% CVSS 8.1
HIGH This Week

Wire is an encrypted communication and collaboration platform. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Wire Wire Server
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM This Month

Wire is a secure messaging application. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS RCE Docker +2
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

wire-ios is an iOS client for the Wire secure messaging application. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Apple Wire
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

wire-webapp is the web application interface for the wire messaging service. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS RCE Docker +2
NVD GitHub
EPSS 1% CVSS 8.1
HIGH This Week

wire-server provides back end services for Wire, an open source messenger. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Jwt Attack Wire +1
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Wire-ios is a messaging application using the wire protocol on apple's ios platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Apple Wire +1
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL Act Now

Wire-server is the backing server for the open source wire secure messaging application. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Privilege Escalation Wire +1
NVD GitHub
EPSS 0% CVSS 4.6
MEDIUM PATCH This Month

Wire is an open source secure messenger. Rated medium severity (CVSS 4.6), this vulnerability is no authentication required, low attack complexity. This Exposure of Resource to Wrong Sphere vulnerability could allow attackers to access resources from an unintended security context.

Information Disclosure Wire
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Wire is an open source secure messenger. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Wire
NVD GitHub
EPSS 1% CVSS 5.7
MEDIUM This Month

wire-server is an open-source back end for Wire, a secure collaboration platform. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wire Wire Server
NVD GitHub
EPSS 0% CVSS 4.3
MEDIUM This Month

Wire is a collaboration platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Apple Wire
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

wire-webapp is the web version of Wire, an open-source messenger. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Wire Webapp Wire
NVD GitHub
EPSS 1% CVSS 9.6
CRITICAL POC Act Now

Restund is an open source NAT traversal server. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Wire Restund
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

wire-ios is the iOS version of Wire, an open-source secure messaging app. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Apple Wire
NVD GitHub
EPSS 0% CVSS 6.5
MEDIUM PATCH This Month

wire-ios is the iOS version of Wire, an open-source secure messaging app. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Apple Wire
NVD GitHub
EPSS 2% CVSS 9.1
CRITICAL POC Act Now

Due to how Wire handles type information in its serialization format, malicious payloads can be passed to a deserializer. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization Microsoft Wire
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

wire-webapp is an open-source front end for Wire, a secure collaboration platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Wire Webapp Wire
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

wire-server is an open-source back end for Wire, a secure collaboration platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Nginx Wire +1
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Wire is an open-source collaboration platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Apple Wire
NVD GitHub
EPSS 4% CVSS 9.8
CRITICAL POC Act Now

Wire before 2020-10-16 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a format string. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Denial Of Service Google +3
NVD GitHub
EPSS 2% CVSS 8.0
HIGH POC PATCH This Week

In Wire before 3.20.x, `shell.openExternal` was used without checking the URL. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Wire
NVD GitHub
EPSS 2% CVSS 7.5
HIGH POC This Week

The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a filename of a received file, related to AssetService.scala. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Google Wire
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy