Security Feature Bypass in WhatsApp Desktop by WhatsApp
CVE-2020-1889
10CRITICAL
What is CVE-2020-1889?
A security feature bypass in WhatsApp Desktop versions prior to v0.3.4932 could lead to potential sandbox escape and privilege escalation. This vulnerability arises from flaws in the Electron framework, which, when combined with a remote code execution vulnerability in the sandboxed renderer process, may allow an attacker to exploit system controls. Users are encouraged to update to the latest version to mitigate potential risks.
Affected Version(s)
WhatsApp Desktop 0.3.4932
WhatsApp Desktop < 0.3.4932