negativeSYS.SOURCE: The Hacker News• 2026-07-22T20:31:21+05:30

Adobe Acrobat Extension Vulnerability Enables Cross-Origin Data Access to WhatsApp Web

#vulnerability #data-theft #browser-security #whatsapp #cross-site-scripting

A newly disclosed vulnerability in the Adobe Acrobat Chrome extension allows malicious websites to access WhatsApp Web data through cross-origin scripting. The flaw, tracked as CVE-2026-48294, enables attackers to steal session-bound data without requiring malware or phishing.

Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data.

The shortcoming has been codenamed HermeticReader by Guardio Labs. It's officially tracked as CVE-2026-48294 (CVSS score: 7.4), with the vulnerability

Read original article

*** END OF TRANSMISSION ***

> OPENAI ACKNOWLEDGES WIKI INCIDENT AND DEVELOPS DISCLOSURE FRAMEWORK > REFLECTIONS ON ESSENTIAL LIFE VALUES: TIME, HEALTH, AND CONNECTION > CLUCKY ALARM APP UTILIZES ROOSTER SOUNDS AND CHALLENGES TO ENHANCE WAKE-UP EXPERIENCE > UNPATCHED TEAMCITY VULNERABILITY LEADS TO AWS CREDENTIAL THEFT IN JETBRAINS CADENCE BREACH > OCAML PROGRAMMING BOOK BY SYLVAIN CONCHON AND JEAN-CHRISTOPHE FILLIÂTRE > TOBACCO INDUSTRY'S ROLE IN THE EXPANSION OF ULTRA-PROCESSED FOODS > WIKIMEDIA FOUNDATION U.S. STAFF VOTE TO UNIONIZE WITH CWA LOCAL 9415 > CRITICAL INTEGER-OVERFLOW VULNERABILITY IN VMWARE WORKSTATION AND FUSION ENABLES HOST CODE EXECUTION > OURA'S PUBLIC OFFERING AND RISING COMPETITION IN THE SMART RING MARKET > 3M'S CONCEALMENT OF PFAS TOXICITY AND ENVIRONMENTAL IMPACT> OPENAI ACKNOWLEDGES WIKI INCIDENT AND DEVELOPS DISCLOSURE FRAMEWORK > REFLECTIONS ON ESSENTIAL LIFE VALUES: TIME, HEALTH, AND CONNECTION > CLUCKY ALARM APP UTILIZES ROOSTER SOUNDS AND CHALLENGES TO ENHANCE WAKE-UP EXPERIENCE > UNPATCHED TEAMCITY VULNERABILITY LEADS TO AWS CREDENTIAL THEFT IN JETBRAINS CADENCE BREACH > OCAML PROGRAMMING BOOK BY SYLVAIN CONCHON AND JEAN-CHRISTOPHE FILLIÂTRE > TOBACCO INDUSTRY'S ROLE IN THE EXPANSION OF ULTRA-PROCESSED FOODS > WIKIMEDIA FOUNDATION U.S. STAFF VOTE TO UNIONIZE WITH CWA LOCAL 9415 > CRITICAL INTEGER-OVERFLOW VULNERABILITY IN VMWARE WORKSTATION AND FUSION ENABLES HOST CODE EXECUTION > OURA'S PUBLIC OFFERING AND RISING COMPETITION IN THE SMART RING MARKET > 3M'S CONCEALMENT OF PFAS TOXICITY AND ENVIRONMENTAL IMPACT