WhatsApp Patches Reels Preview and Windows Attachment Flaws: Check Your Version Now

Meta disclosed and patched two security flaws in a 2026 advisory affecting WhatsApp on Windows, iPhone, and Android, and urged users to run the latest app builds. The more serious vulnerability, CVE-2026-23863, could let a malicious file be shown as a harmless document but run as an executable when opened, and affects WhatsApp for Windows before version 2.3000.1032164386.258709. The U.S. NVD lists a CVSS base score of 6.5; exploitation requires user action, but the impact can be code execution. Meta reports no evidence of active exploitation; Malwarebytes urged its roughly 3 billion users to update on May 5, 2026, and automatic updates are recommended.