CVE-2026-48294

CVE

Threat entity extracted from intelligence sources

Frequency

6

occurrences

First Seen

July 22, 2026

Last Seen

July 24, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Adobe Acrobat Extension Vulnerability Enables WhatsApp Data Theft70.5

A critical vulnerability in the Adobe Acrobat Chrome extension, tracked as CVE-2026-48294 and named HermeticReader, allows attackers to access WhatsApp Web data without authentication. The flaw affects approximately 329 million users and requires only a single visit to a malicious webpage. Exploitat...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Adobe Acrobat Extension Vulnerability Enables WhatsApp Data Theft

Jul 22·7 sources

Related Articles (6)

Guardio Labs

guard.io·Jul 24

Adobe Acrobat extension vulnerability allowed WhatsApp data theft

Feeds.Feedburner·Jul 22

Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft

Securityaffairs.Co·Jul 22

Adobe Acrobat extension flaw allowed theft of WhatsApp Web data

Feeds.4Sysops·Jul 22

Adobe Acrobat Extension Flaw Lets Attackers Steal WhatsApp Chats From 329 Million Users

Cybersecuritynews·Jul 22

1 / 2

Related Entities

Data Breach Zero-day Exploit Guardio Labs Adobe CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication CWE-78 - OS Command Injection T1567 - Exfiltration Over Web Service T1566.002 - Spearphishing Link T1041 - Exfiltration Over C2 Channel T1059 - Command and Scripting Interpreter Adobe Acrobat