WhatsApp has asked users to update their application to avoid risks with their service.
With the latest updates to its service, WhatsApp has corrected two vulnerabilities classified with critical and high severity, respectively, which would allow remote code execution.
The technology company has updated its ‘Security Warnings’ page with two vulnerabilities that have already been fixed in the latest versions of the app, but that may put users of less recent versions at risk.
Why the alert?
A vulnerability, identified as CVE-2022-36934, could allow remote code execution during a manipulated video call. It affects versions prior to 2.22.16.12, both WhatsApp for Android and iOS, and Business for Android and iOS.
The second, CVE-2022-27492, would also allow remote execution of malicious code, only this time via a malicious video file. It affects versions prior to WhatsApp for Android v2.22.16.2 and for iOS v2.22.15.9.
CVE-2022-36934 is rated as a Critical severity vulnerability, on a scale of 9.8 out of 10, while CVE-2022-27492 is rated as High severity, on a 7.8 out of 10 scale.
How do I update WhatsApp?