Urgent Update for WhatsApp Users: Security Flaws Fixed
WhatsApp users: 'Update right away' as new bugs could inject 'dangerous' files in your devices
The Times Of India
Image: The Times Of India
Meta, the parent company of WhatsApp, has issued a security advisory addressing two vulnerabilities that could allow attackers to exploit media handling on devices. Users are urged to update their WhatsApp apps on both Android and iOS to mitigate potential risks associated with these flaws.
- 01Meta has released a security advisory for WhatsApp addressing two critical vulnerabilities.
- 02The first vulnerability could allow attackers to load media from untrusted URLs through specially crafted messages.
- 03The second vulnerability affects WhatsApp for Windows, allowing malicious documents to masquerade as safe files.
- 04Users are encouraged to update their apps immediately to protect against potential exploitation.
- 05No evidence of these vulnerabilities being exploited in the wild has been reported yet.
Advertisement
In-Article Ad
Meta has announced important security updates for WhatsApp, addressing two vulnerabilities that could compromise user devices. The first vulnerability, tracked as CVE-2026-23866, affects how WhatsApp processes AI-generated rich response messages containing Instagram Reels. This flaw allows specially crafted messages to load media from attacker-controlled URLs, potentially triggering harmful actions on users' devices. The second issue, CVE-2026-23863, pertains to WhatsApp for Windows, where maliciously formatted documents could appear as one file type but execute as another when opened. Meta has confirmed that there is currently no evidence of these vulnerabilities being exploited. Users are advised to update their apps on both Android and iOS to ensure their devices are secure. Updating WhatsApp is straightforward: Android users can do so via the Google Play Store, while iOS users can update through the App Store.
Advertisement
In-Article Ad
Users who do not update their WhatsApp may be at risk of falling victim to social engineering attacks or malware.
Advertisement
In-Article Ad
Reader Poll
How often do you update your apps for security reasons?
Connecting to poll...
More about Meta
Read the original article
Visit the source for the complete story.