Security researchers have identified two critical vulnerabilities in WhatsApp that could pose risks to users. These vulnerabilities affect how media files and attachments are managed and impact WhatsApp for Windows users. Although these flaws do not automatically infect devices, they could potentially be exploited by cybercriminals to conduct social engineering attacks or combine them with other vulnerabilities.
The vulnerabilities, known as CVE-2026-23866 and CVE-2026-23863, were discovered through Meta’s Bug Bounty program. While there is no evidence of these flaws being exploited in real-world attacks, WhatsApp has released an update to address the issues. Users are strongly advised to check their settings and ensure that WhatsApp is up to date on their devices to stay protected.
Android users can update WhatsApp by accessing the Google Play Store, searching for WhatsApp Messenger, and selecting “Update.” iPhone users should open the App Store, locate WhatsApp in their profile, and choose “Update.” Once the update is installed, devices will be safeguarded against potential security threats.
In a related development, older Android devices may soon lose access to WhatsApp, with support ending for devices running versions older than Android 6 starting from September 8, 2026. Affected users may receive a notification indicating that WhatsApp will no longer be supported on their devices. However, this change is unlikely to impact most users, as Android 6 is an outdated version that is no longer widely used on modern smartphones.