WhatsApp users are advised to review their settings and ensure they are using the latest version of the app due to two security vulnerabilities identified by security researchers. One flaw affects how media files and attachments are managed, while another targets WhatsApp for Windows users.

Although the vulnerabilities do not automatically infect devices, they could facilitate cybercriminals in executing social engineering attacks or combining them with other vulnerabilities for more severe threats, as cautioned by experts at Malwarebytes.

A malicious message could potentially deceive a device into opening content from an untrusted origin. These vulnerabilities, known as CVE-2026-23866 and CVE-2026-23863, were brought to light through Meta’s Bug Bounty program.

Currently, there is no evidence of these flaws being exploited in real-world attacks or used to infect phones. WhatsApp stated that they have not detected any exploitation in live scenarios. Nevertheless, the Meta-owned company has issued an update and strongly recommends users to review their settings.

To ensure protection, users should verify that WhatsApp is fully updated on their devices. Android users can update the app by accessing the Google Play Store, searching for WhatsApp Messenger, and selecting “Update.” iPhone users need to open the App Store, tap their profile icon, scroll to WhatsApp, and choose “Update.”

Upon completing the installation, devices will be shielded from potential future attacks. In related news, some older Android devices may lose access to WhatsApp soon, as the messaging platform plans to discontinue support for devices running versions older than Android 6 starting from September 8, 2026, as reported by WABetaInfo.

Affected users may receive a message indicating that WhatsApp will cease to function on their device later in the year. However, the impact is anticipated to be minimal, considering that Android 6 was introduced in 2015 and is now seldom used on contemporary smartphones.