CVE-2018-6018: Tinder

Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days.

Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic.

Affected products

• Tinder Tinder: affected versions not specified

Published 2018-01-24. Last modified 2026-06-17.