Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Summary
A vulnerability chain in the Adobe Acrobat Chrome extension, codenamed HermeticReader, has been disclosed by researchers. This flaw could allow malicious websites to silently access and potentially hijack a user's WhatsApp data. Adobe has released a patch to address this issue.
IFF Assessment
This vulnerability allows malicious actors to potentially steal sensitive user data from a popular application, posing a direct threat to users.
Severity
The CVSS score of 7.4 indicates a High severity vulnerability. It implies a significant impact on confidentiality and integrity, with potential for widespread exploitation.
Defender Context
This incident highlights the risks associated with browser extensions and the importance of keeping them, as well as core applications like Adobe Acrobat, updated. Defenders should monitor for any signs of exploitation targeting this vulnerability and ensure users are aware of the risks of installing extensions from untrusted sources.