TikTok
Security Risk Profile
67
/100
highSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 15, 2018 to present
8
Total CVEs
3
Critical+High
1
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
7.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
67/100
high
⚠️ 1 Active Exploits
Severity Distribution
Critical
0High
3Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. TikTok TikTok10
2. TikTok Shop2
3. TikTok PowerShell1
4. Google Android1
5. WhatsApp WhatsApp1
Recent Vulnerabilities
See more →https://www.zdnet.com/article/tiktok-video-promising-you-free-photoshop-or-windows-license-dont-do-it-its-a-scam/
unknown
TikTok video promising you free Photoshop or Windows license? Don't do it - it's a scam
10/21/2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/new-android-spyware-clayrat-imitates-whatsapp-tiktok-youtube/
unknown
New Android spyware ClayRat imitates WhatsApp, TikTok, YouTube
10/9/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/ctm360-spots-malicious-clicktok-campaign-targeting-tiktok-shop-users/
unknown
CTM360 spots Malicious ‘ClickTok’ Campaign Targeting TikTok Shop users
8/4/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/ctm360-spots-malicious-fraudontok-campaign-targeting-tiktok-shop-users/
unknown
CTM360 spots Malicious ‘FraudOnTok’ Campaign Targeting TikTok Shop users
8/4/2025🔧 No Patch
CVE-2024-45240
CVSS 7.4high
8/24/2024🔧 No Patch
CVE-2022-28799
CVSS 8.8high
5/30/2022🔧 No Patch
CVE-2019-14319
CVSS 6.5medium
9/4/2019🔧 No Patch
CVE-2017-13101
CVSS 7.5high
Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption
8/15/2018🔧 No Patch
Monitor TikTok in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.