CyberHappenings logo
☰
Home Browse About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Pwn2Own 2025: WhatsApp Exploit Withdrawal and Low-Risk Vulnerabilities Disclosed

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

A researcher planned to demonstrate a $1 million zero-click remote code execution exploit against WhatsApp at the Pwn2Own hacking contest. The demonstration did not occur, and the researcher withdrew from the competition. The researcher disclosed two low-risk vulnerabilities to Meta, which are being reviewed by WhatsApp. The exploit's technical viability remains unclear. The researcher, Eugene (3ugen3) from Team Z3, cited concerns about the exploit's readiness for public demonstration. The vulnerabilities disclosed are not useful for achieving arbitrary code execution. The researcher's identity and specific details about the vulnerabilities remain confidential.

Timeline

  1. 25.10.2025 14:36 1 articles · 1d ago

    Pwn2Own 2025: WhatsApp Exploit Withdrawal and Low-Risk Vulnerabilities Disclosed

    A researcher planned to demonstrate a $1 million zero-click remote code execution exploit against WhatsApp at Pwn2Own 2025. The demonstration did not occur, and the researcher withdrew from the competition. The researcher disclosed two low-risk vulnerabilities to Meta, which are being reviewed by WhatsApp. The exploit's technical viability remains unclear. The researcher, Eugene (3ugen3) from Team Z3, cited concerns about the exploit's readiness for public demonstration. The vulnerabilities disclosed are not useful for achieving arbitrary code execution. The researcher's identity and specific details about the vulnerabilities remain confidential.

    Show sources
    Open in new tab

Information Snippets