Adobe Acrobat extension flaw allowed theft of WhatsApp Web data

A critical vulnerability, tracked as CVE-2026-48294 and dubbed HermeticReader, was recently discovered in the Adobe Acrobat Chrome extension. This flaw allowed malicious websites to bypass browser security policies and access sensitive data from a user's active WhatsApp Web session. The vulnerability affected approximately 329 million browsers, impacting all extension versions up to and including 26.5.2.2. Source

Read the full article at the source.