Signal for Desktop is Vulnerable to Attachments Exposure

CyberTech

Level 44
Thread author
Verified
Top Poster
Well-known
Nov 10, 2017
3,138
1
22,994
4,269
Researchers have discovered two vulnerabilities in Signal for desktop that could allow local attackers to access attachments sent by the user in the past or replace the files with poisoned clones.

The flaws are present on all Signal clients for desktop, including Windows, Linux, and macOS, since they all share the same codebase, and all versions up to the most recent, v6.2.0.

Full article