negativeSYS.SOURCE: The Hacker News• 2026-07-22T20:31:21+05:30

Adobe Acrobat Extension Vulnerability Enables Cross-Origin Data Access to WhatsApp Web

#vulnerability #data-theft #browser-security #whatsapp #cross-site-scripting

A newly disclosed vulnerability in the Adobe Acrobat Chrome extension allows malicious websites to access WhatsApp Web data through cross-origin scripting. The flaw, tracked as CVE-2026-48294, enables attackers to steal session-bound data without requiring malware or phishing.

Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data.

The shortcoming has been codenamed HermeticReader by Guardio Labs. It's officially tracked as CVE-2026-48294 (CVSS score: 7.4), with the vulnerability

Read original article

*** END OF TRANSMISSION ***

> SCIENCE CORPORATION'S PRIMA VISION-CHIP RECEIVES EU MEDICAL DEVICE APPROVAL > YOPE SECURES $12.3M FOR ALGORITHM-FREE, AD-FREE PRIVATE SOCIAL NETWORK > CRITICAL UBUNTU SNAP-CONFINE VULNERABILITY (CVE-2026-8933) ENABLES LOCAL ROOT ACCESS VIA RACE CONDITIONS > MENLO VENTURES' MATT MURPHY ON ANTHROPIC'S STRATEGIC GROWTH DRIVERS BEYOND MODEL CAPABILITIES > MONDAY.COM RESTRUCTURES WORKFORCE TO PRIORITIZE AI DEVELOPMENT > ANALYSIS OF TERRENCE TAO'S DISCUSSION ON JACOBIAN CONJECTURE COUNTEREXAMPLE VIA CHATGPT > GIGATOKEN: HIGH-SPEED LANGUAGE MODEL TOKENIZATION AT GB/S > TESTING AI LAB OPTIMIZATION FOR PELICAN-ON-BICYCLE BENCHMARK > GOOGLE UNVEILS NATIVE IPHONE-TO-ANDROID MIGRATION FEATURE IN ANDROID 17 > INTERACTIVE WEB-SWING EXPERIENCE IN MIDTOWN MANHATTAN> SCIENCE CORPORATION'S PRIMA VISION-CHIP RECEIVES EU MEDICAL DEVICE APPROVAL > YOPE SECURES $12.3M FOR ALGORITHM-FREE, AD-FREE PRIVATE SOCIAL NETWORK > CRITICAL UBUNTU SNAP-CONFINE VULNERABILITY (CVE-2026-8933) ENABLES LOCAL ROOT ACCESS VIA RACE CONDITIONS > MENLO VENTURES' MATT MURPHY ON ANTHROPIC'S STRATEGIC GROWTH DRIVERS BEYOND MODEL CAPABILITIES > MONDAY.COM RESTRUCTURES WORKFORCE TO PRIORITIZE AI DEVELOPMENT > ANALYSIS OF TERRENCE TAO'S DISCUSSION ON JACOBIAN CONJECTURE COUNTEREXAMPLE VIA CHATGPT > GIGATOKEN: HIGH-SPEED LANGUAGE MODEL TOKENIZATION AT GB/S > TESTING AI LAB OPTIMIZATION FOR PELICAN-ON-BICYCLE BENCHMARK > GOOGLE UNVEILS NATIVE IPHONE-TO-ANDROID MIGRATION FEATURE IN ANDROID 17 > INTERACTIVE WEB-SWING EXPERIENCE IN MIDTOWN MANHATTAN