CVE-2026-23866

Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 could have allowed a user to trigger processing of media content from an arbitrary URL on another user’s device, including triggerin...

CVE-2025-55179

WhatsApp family apps (iOS and Mac) are affected by incomplete validation of rich response messages that could allow processing of media content from an arbitrary URL on another user’s device. Affected versions: iOS WhatsApp pre-2.25.23.73, iOS WhatsApp Business pre-2.25.23.82, and Mac WhatsApp pr...