Cyber-security researchers have identified a critical JavaScript vulnerability in the WhatsApp desktop app prior to versions 0.3.9309. Originally discovered by Gal Weizman of PerimeterX, the vulnerability affects both the Windows and Mac versions of the app, and could potentially allow cyber-criminals to inject malware or perform remote code execution using seemingly innocuous messages.
As mentioned already, WhatsApp Desktop v0.3.9309 and earlier versions are affected by the vulnerability, so you should update to the latest version as soon as possible. You can also learn more about the issue from Weizman’s report on the official PerimeterX blog.