Vulnerability in Tencent WeChat custom browser could lead to remote code execution
Summary: Cisco Talos found that WeChat uses a custom WebView component, a Tencent-maintained version of XWalk built on Chromium with V8 version 8.6.365.13 released Oct. 12, 2020, which is downloaded to the phone after the user first logs in. The exploit, tied to CVE-2023-3420, is triggered when a victim clicks a URL in a malicious WeChat message, loading JavaScript inside XWalk and letting the attacker execute arbitrary code; Talos confirmed WeChat version 8.0.42 was impacted.
What you should know: A single tap on a link in a chat is enough to hand an attacker control of the device, and Talos notes the app does not update XWalk automatically right after a WeChat update is released, so the vulnerable browser can persist on phones that appear current.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2023-3420
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026