Unverified50% confidenceFactExact time
A zero-click exploit refers to an attack method that can remotely compromise a device without any interaction from the victim, typically exploiting message-parsing vulnerabilities in instant messaging services such as iMessage and WhatsApp.
1
Sources
50%
Confidence
Long-term
Relevance
10/24/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedTraditional zero-click attacks mostly rely on unpatched remote code execution vulnerabilities in the operating system or browser (such as iMessage's FORCEDENTRY), whereas AdFection does not rely on a specific CVE and instead abuses browser API behaviors permitted by the advertising standard itself.77% similarUnverifiedZero-click attacks bypass the security advice of not clicking suspicious links, and protection depends entirely on vulnerability fixes at the endpoint and browser levels.76% similarVerifiedBoth vulnerabilities are of the zero-click attack type, meaning attackers can execute arbitrary code in the user's running environment and steal sensitive credentials such as API keys without the victim clicking any link or downloading any file.76% similarPartially VerifiedZero-click attacks typically combine multiple stages: a parsing vulnerability in a rendering engine, a system-level privilege escalation vulnerability, and a silent installation mechanism used for persistence.73% similarUnverifiedIn WeWorm's zero-click attack, victims can be attacked without answering the call, and even if the call is answered no sound is heard while the exploit still executes successfully.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1092196API
curl https://kongchang.com/api/v1/knowledge/claims/1092196MCP
get_claim(id=1092196)