[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyql3KCofhq6tFnxNHKQ4VLomVppm65g38YT1FxxJCIM":3},{"article":4,"iocs":46,"watch_terms":51,"solutions":52,"lesson":111},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"4a960516-3a65-4103-9195-b7dc51770562","Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data","adobe-acrobat-extension-flaw-let-malicious-sites-read-whatsapp-web-data-214533","Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data. The shortcoming has been codenamed HermeticReader by Guardio Labs. It's officially tracked as CVE-2026-48294 (CVSS score: 7.4), with the vulnerability","A vulnerability chain in the Adobe Acrobat Chrome extension, codenamed HermeticReader, allowed malicious websites to silently steal WhatsApp Web data. The flaw, tracked as CVE-2026-48294, exploited a universal cross-site scripting (UXSS) vulnerability to bypass the browser's same-origin policy, enabling attackers to access session-bound data from third-party applications like WhatsApp. Exploitation required user interaction, such as visiting a crafted URL, but did not necessitate malware installation or credential theft.","Adobe Acrobat Chrome extension flaw allowed malicious sites to read WhatsApp Web data.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Fadobe-acrobat-extension-flaw-let.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhf4tAo-p42ED3dQRVz6O7qldcTuY-ztwtPbNnnJFBHd-yJDm2dJmYNPtprB3IFhF9-7xExM_6jzqElcEotSZPEXwVYoiqG7Wh6isEjRAZkqzIyL4TYXUL3pK8hp53PdCHotDcUAZ9LVCJLDPX3PPZqDKIaFDlTnB5MbaRH0-ohMCzBAmdRDC_E6O5rGUtd\u002Fs1600\u002Fadobe.jpg","2026-07-22T15:01:21+00:00","2026-07-22T20:00:26.950329+00:00",8,[17,20,22,25],{"name":18,"type":19},"Adobe Acrobat Chrome extension","product",{"name":21,"type":19},"WhatsApp Web",{"name":23,"type":24},"Adobe","vendor",{"name":26,"type":27},"Guardio Labs","threat_actor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,39,44],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":45},{"id":28,"icon":30,"name":31,"slug":32},[47],{"type":48,"value":49,"context":50},"cve","CVE-2026-48294","Adobe Acrobat Chrome extension vulnerability",[23,18,21],{"controls":53,"vendors":110},[54,83],{"slug":55,"name":56,"problem":57,"products":58},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"slug":84,"name":85,"problem":86,"products":87},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[88,95,103],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":89,"product_name":92,"url":93,"description":94},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":84,"product_name":107,"url":108,"description":109},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[],{"slug":112,"title":113,"body":114,"framework_refs":115,"framework_notes":126},"adobe-acrobat-chrome-extension-uxss-flaw-exposed-whatsapp-web-session-data","Adobe Acrobat Chrome Extension UXSS Flaw Exposed WhatsApp Web Session Data","A vulnerability chain (CVE-2026-48294) in the Adobe Acrobat Chrome extension allowed malicious websites to exploit a universal cross-site scripting (UXSS) flaw, bypassing the browser's same-origin policy and silently reading session data from WhatsApp Web. This matters because browser extensions operate with elevated trust and broad permissions, making them a high-value attack surface that can undermine the isolation guarantees browsers are designed to enforce. Critically, no malware installation was required — simply visiting a crafted URL was sufficient to trigger the exploit, meaning ordinary users with no security knowledge were at risk. This incident highlights how third-party browser extensions can inadvertently create cross-application data exposure, putting communications data from entirely unrelated services (like WhatsApp) at risk through a single vulnerable component.",[116,117,118,119,120,121,122,123,124,125],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 4 – Secure Configuration of Enterprise Assets and Software","NIST SP 800-53 CM-7 – Least Functionality","NIST SP 800-53 SI-2 – Flaw Remediation","NIST SP 800-53 SC-3 – Security Function Isolation","NIST SP 800-53 RA-5 – Vulnerability Monitoring and Scanning","GDPR Article 32 – Security of Processing (protecting personal communications data)","OWASP A03:2021 – Injection (XSS \u002F UXSS)","ITIL Change Management – Emergency patch deployment procedures",{}]