Adobe Acrobat Chrome Extension Flaw Lets Attackers Read WhatsApp Web Chats
Researchers uncovered a patched UXSS chain in Adobe Acrobat’s Chrome extension (CVE‑2026‑48294) that can silently hijack WhatsApp Web sessions. By coaxing a user to visit a malicious page, an attacker can bypass same‑origin policy and exfiltrate chats without installing malware. The bug affects over 314 million users on versions up to 26.5.2.2.