VulnerabilityPublished
ZDI-26-971: Signal for Windows Insufficient UI Warning Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 13 Nov 2026, 20:34 UTC
What to do
AI-suggested
Users should exercise caution when handling attachments in Signal for Windows. Monitor vendor advisories for updates and official fixes.
Description
A remote code execution vulnerability exists in Signal for Windows that allows attackers to execute arbitrary code if a user accepts a malicious attachment. Exploitation requires user interaction. The vulnerability has a high severity rating of 7.5 assigned by the Zero Day Initiative.
References
Community reviews
Loading reviews…