Security researchers have identified two significant software vulnerabilities in WhatsApp that affect how media files and attachments are managed, along with a specific issue for Windows users of the app. While these flaws do not directly infect devices, they could potentially enable cybercriminals to conduct social engineering attacks or combine them with other vulnerabilities for more severe threats. Malwarebytes experts cautioned that a malicious message could deceive a device into opening content from an untrusted source. The vulnerabilities, known as CVE-2026-23866 and CVE-2026-23863, were discovered through Meta’s Bug Bounty program. Although there is no evidence of these vulnerabilities being exploited in real-world attacks, WhatsApp has released an update, urging users to review their settings for enhanced security. To ensure protection, users are advised to update WhatsApp to the latest version on their devices. Android users can update via the Google Play Store by searching for WhatsApp Messenger and selecting “Update,” while iPhone users can update by accessing the App Store, locating WhatsApp in their profile, and selecting “Update.” Following the update, devices should be safeguarded against potential threats. In related news, some older Android devices may lose access to WhatsApp soon, as the messaging platform plans to discontinue support for devices running versions older than Android 6 starting September 8, 2026. Affected users may receive a notification stating that WhatsApp will no longer function on their devices later in the year. However, the impact is expected to be minimal, as Android 6 is an outdated version seldom found on modern smartphones.
Popular Categories


