The WhatsApp is the world’s most popular messaging application, with more than 1.5 billion users, many of whom use it in web versions.
But now it is revealed that a bug in WhatsApp’s desktop app last month caused hackers to read users files.
Security Company Perimeter X said in a post that the bug would have affected those who used the WhatsApp app on Windows or Mac to connect to an iPhone.
Researchers discovered weaknesses in WhatsApp’s CSP that could help control the account by sending suspicious messages and links using cross-site scripting.
Researchers have taken advantage of these vulnerabilities by sending such harmful codes to read files in another user’s computer’s local system, which can be harmful when sensitive documents are stored in the machine.
He said that WhatsApp should not use the older version of Google’s Chrome browser platform to avoid such vulnerabilities, as well as users who use the WhatsApp on the desktop app with the help of an iPhone, they should update their phones with latest iOS version.
On the other hand, the WhatsApp-owned Facebook also acknowledged the bug’s presence and said it had been controlled.
Whatsapp provides end-to-end encryption messages for Android and iPhone. This feature is also available on the Desktop app.