PT-2025-15063 · Facebook · Facebook Whatsapp Desktop +1

Published

2025-04-05

·

Updated

2025-08-30

·

CVE-2025-30401

Report an issue
CVSS v2.0
6.8
VectorAV:N/AC:H/Au:S/C:C/I:C/A:P

**Name of the Vulnerable Software and Affected Versions:**

WhatsApp for Windows versions prior to 2.2450.6

**Description:**

A spoofing issue exists in WhatsApp for Windows, prior to version 2.2450.6, where attachments are displayed according to their MIME type, but the file opening handler is selected based on the filename extension. A maliciously crafted mismatch could cause the recipient to inadvertently execute arbitrary code instead of viewing the attachment when manually opened within WhatsApp. No evidence of exploitation in the wild has been reported.

**Recommendations:**

Update WhatsApp to version 2.2450.6 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-04971
CVE-2025-30401

Affected Products

Facebook Whatsapp Desktop
Whatsapp For Windows