Meta uncovered a medium-severity vulnerability in the WhatsApp application for Windows that could deceive users into executing malicious .exe files, misleadingly represented as innocuous images. The flaw exploited MIME type and filename extension mismatches to manipulate file representations within the chat. Although there was no recorded abuse of this flaw in the wild, Meta promptly addressed the issue through an update recommended for all users to mitigate potential exploitation that could compromise systems through social engineering tactics. The vulnerability, having been a potential vector for cyberattacks via widely circulated images within WhatsApp groups, posed a significant threat to user security.
"id": "met642040825",
"linkid": "meta",
"type": "Vulnerability",
"date": "4/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"