CyberSecurity News

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

The Hacker News

· July 22, 2026

AI summary

A vulnerability was discovered in the Adobe Acrobat Chrome extension, which has over 314 million users, that could have allowed malicious sites to access a user's WhatsApp web data. The flaw, known as HermeticReader, is tracked as CVE-2026-48294 and has a CVSS score of 7.4. This vulnerability chain could have enabled a silent hijack of user data if exploited. The issue has now been patched. The vulnerability was identified by Guardio Labs.

Vulnerabilities mentioned

CVE-2026-48294

HIGH

CVSS 7.4

Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerability to gain access to data regarding the victim's session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Read the full article at The Hacker Newsthehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to The Hacker News.