"The bulletin warned of Russian professional hacking groups employing phishing scams to gain access to encrypted conversations, bypassing the end-to-end encryption the application uses."

Phishing is not what we typically call a 'vulnerability', it's a technique to get access absent a vuln