What’s Vulnerable › Vulnerabilities
CVE-2021-34421: Retained exploded messages in Keybase Clients for Android and iOS
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-11-11 · updated 2026-06-17
- Weakness: CWE-459
Description
The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.
Affected products
References
- https://explore.zoom.us/en/trust/security/security-bulletin
- https://explore.zoom.us/en/trust/security/security-bulletin
Get alerted when CVE-2021-34421 or the next vulnerability affects your stack