Signal

Products

ProductCVEsExploitedLatest
App1–Jun 6, 2025
RingRTC1–Oct 20, 2026

Exploited and recent CVEs

  • CVE-2026-113380 Critical 9.3 In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perhaps also video track 0.9%
  • CVE-2025-5715 Low 3.8 Signal App Biometric Authentication missing critical step in authentication 0.3%