CVE-2021-24027: WhatsApp

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material.

Affected products

• WhatsApp WhatsApp: before 2.21.4.18 (fixed in 2.21.4.18)
• WhatsApp WhatsApp Business: before 2.21.4.18 (fixed in 2.21.4.18)

Published 2021-04-06. Last modified 2026-06-17.