MEDIUM🇬🇧 English

CVE-2026-23863

CVSS 6.5v3.1pub. 2026-05-01upd. 2026-05-11

An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embedded NUL bytes in the filename to be shown in the application as one type of file but run as an executable when opened. We have not seen evidence of exploitation in the wild.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
  • Whatsapp

    APP
    Whatsapp
    < 2.3000.1032164386.258709
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2019-3568CRITICAL9.8⚠ KEVten sam produkt

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted ser...

CVE-2022-36934CRITICAL9.8ten sam produkt

An integer overflow in WhatsApp could result in remote code execution in an established video call.

CVE-2021-24043CRITICAL9.1ten sam produkt

A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business fo...

CVE-2021-24042CRITICAL9.8ten sam produkt

The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23,...

CVE-2021-24041CRITICAL9.8ten sam produkt

A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business f...

CVE-2026-23863 — MEDIUM 6.5 | CVEbaza.pl