Discord desktop app vulnerability chain triggered remote code execution attacks (zdnet.com)

This one is from October and was fixed as part of a bug bounty. There may be a different mp4 0-day circulating right now however, that is unrelated to this.