Meta Discloses 2 WhatsApp Vulnerabilities In New Security Advisory

Meta said WhatsApp patched two medium-severity vulnerabilities reported through its bug bounty program.

One flaw affected the Windows app and could allow attachment spoofing; the other affected iOS and Android.

The issues were tracked as CVE-2026-23863 and CVE-2026-23866.

Meta said there is no evidence the bugs were exploited in the wild.