Major WhatsApp vulnerability on Windows prompts urgent user action

Friday 18 April 2025 - 11:50

By: Dakir Madiha

Major WhatsApp vulnerability on Windows prompts urgent user action

The General Directorate of Information System Security (DGSSI) has issued a security bulletin alerting users about a significant vulnerability affecting the WhatsApp application for Windows operating systems. This flaw poses a considerable risk to personal information security and was identified by the Cyber Attack Detection and Response Monitoring Center, a branch of the DGSSI responsible for monitoring digital threats.

According to the security bulletin, this vulnerability impacts all WhatsApp versions prior to 2.2450.6. The primary danger associated with this flaw is that it allows a remote attacker to execute arbitrary code on the victim's computer. In practical terms, a hacker could exploit this weakness to gain control of the system, steal sensitive personal data, or even launch further attacks against other targets.

Meta, the parent company of WhatsApp, has responded promptly by announcing that the vulnerability has been fixed in recent application versions. A security patch has been made available, allowing users to secure their systems. However, the DGSSI urges Moroccan users to update their WhatsApp application immediately to mitigate any intrusion risks. Users are advised to navigate to the application settings and update to version 2.2450.6 or later.

This warning is part of a proactive security policy by the DGSSI aimed at enhancing cybersecurity in Morocco, particularly in light of the increasing frequency of cyberattacks. In recent months, these attacks have targeted major government websites and led to leaks of sensitive data.

Additionally, the DGSSI recently issued a warning regarding a vulnerability affecting websites using the SureTriggers plugin on the WordPress platform. Identified under ID CVE-2025-3102, this flaw also represents a high risk, as it allows attackers to bypass existing protections. WordPress has since corrected this vulnerability, and users are encouraged to update the plugin via the official page.

These two alerts highlight the importance of constant vigilance against the increasing digital threats, especially at a time when cybersecurity is becoming a major global concern.