Users of WhatsApp for communication with friends and family are advised to review their settings and ensure they have the most recent version of the app installed. Security experts have identified two significant software vulnerabilities in the widely-used messaging platform. One vulnerability affects the handling of media files and attachments, while another specifically impacts Windows users of WhatsApp.
Malwarebytes researchers have cautioned that although these flaws do not automatically infect devices, they could potentially facilitate social engineering attacks by cybercriminals or be combined with other vulnerabilities to create more severe security threats.
According to Malwarebytes, a malicious message might deceive a device into opening content from an untrusted origin.
The vulnerabilities, known as CVE-2026-23866 and CVE-2026-23863, were uncovered through Meta’s Bug Bounty program.
As of now, there is no evidence that either vulnerability has been exploited in real-world attacks or used to infect mobile devices. WhatsApp has stated that there is “no indication of exploitation in the wild.”
Nonetheless, the company owned by Meta has issued an update and strongly advises users to review their settings.
To ensure security, users should verify that WhatsApp is fully updated on their devices.
For Android users, updating WhatsApp involves:
Accessing the Google Play Store, searching for WhatsApp Messenger, and selecting “Update.”
iPhone users should:
Open the App Store, tap their profile icon, scroll to WhatsApp, and choose “Update.”
After the update is completed, devices will be safeguarded against potential future attacks.
This cautionary news coincides with the possibility that some older Android devices may lose WhatsApp access. WABetaInfo reports that WhatsApp intends to discontinue support for devices running versions older than Android 6 starting September 8, 2026.
Affected users may receive a notification stating: “WhatsApp will no longer function on this device later this year.”
The majority of users are unlikely to be affected, as Android 6 was launched in 2015 and is now seldom used on contemporary smartphones.
Select Daily Mirror as a ‘Preferred Source’ on Google News for swift access to the news that matters to you.
At <a href="https://www.reachplc