Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Meta has disclosed and patched two medium severity security flaws in WhatsApp, affecting users on Windows, iPhone, and Android. The more critical vulnerability, CVE-2026-23863, allows malicious documents to appear harmless due to an attachment spoofing issue. This flaw affects WhatsApp for Windows v...
Meta has disclosed two vulnerabilities in WhatsApp, CVE-2026-23863 and CVE-2026-23866, in a security advisory published on May 1, 2026. Both vulnerabilities were discovered through Meta's bug bounty program and are rated as medium severity. CVE-2026-23863 affects WhatsApp for Windows and involves an...
On October 6, 2026, Cyberkendra reported that WhatsApp patched CVE-2026-23866, a vulnerability allowing attackers to exploit Instagram Reels URLs to leak sensitive information like IP addresses and headers. The flaw, disclosed by Meta on May 1, 2026, affects WhatsApp versions 2.25.8.0 to 2.26.15.72...
