Refine your search
69 vulnerabilities found for electron by electron
CVE-2026-115570 (GCVE-0-2026-115570)
Vulnerability from cvelistv5
Published
2026-10-23 18:13
Modified
2026-10-23 20:56
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-299 - Improper Check for Certificate Revocation
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch. An attacker who holds a certificate issued through one of these intermediates and can intercept network traffic can impersonate a TLS server to an affected application. This issue is fixed in versions 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6.
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-115570",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-23T20:45:42.599802Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-23T20:56:26.712Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003e= 45.0.0-alpha.1, \u003c 45.0.0-beta.6"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.9.1"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.8.1"
},
{
"status": "affected",
"version": "\u003c 42.11.16"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhra intermediate certificates in Chromium networking, Node.js tls, Node.js https, or Node.js fetch. An attacker who holds a certificate issued through one of these intermediates and can intercept network traffic can impersonate a TLS server to an affected application. This issue is fixed in versions 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-299",
"description": "CWE-299: Improper Check for Certificate Revocation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-23T18:13:53.961Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-jr5w-w6x2-84p9",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-jr5w-w6x2-84p9"
},
{
"name": "https://github.com/electron/electron/pull/55127",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/55127"
},
{
"name": "https://github.com/electron/electron/pull/55128",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/55128"
},
{
"name": "https://github.com/electron/electron/pull/55129",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/55129"
},
{
"name": "https://github.com/electron/electron/pull/55130",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/55130"
},
{
"name": "https://github.com/electron/electron/commit/093583c71be71c85453e6e225137bf2af755fbcc",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/093583c71be71c85453e6e225137bf2af755fbcc"
},
{
"name": "https://github.com/electron/electron/commit/1d2f13b1985444a38abf389db38228ac42f5bcad",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/1d2f13b1985444a38abf389db38228ac42f5bcad"
},
{
"name": "https://github.com/electron/electron/commit/817c43f925677eb88034bfba4f0b8dfd28e7ad20",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/817c43f925677eb88034bfba4f0b8dfd28e7ad20"
},
{
"name": "https://github.com/electron/electron/commit/e02265be96c5e13ae43644ef482b718e1e800499",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/e02265be96c5e13ae43644ef482b718e1e800499"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.11.16",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.11.16"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.8.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.8.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.9.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.9.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v45.0.0-beta.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v45.0.0-beta.6"
}
],
"source": {
"advisory": "GHSA-jr5w-w6x2-84p9",
"discovery": "UNKNOWN"
},
"title": "Electron: Mitigation for compromised eMudhra intermediate certificates"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-115570",
"datePublished": "2026-10-23T18:13:53.961Z",
"dateReserved": "2026-10-22T22:53:15.237Z",
"dateUpdated": "2026-10-23T20:56:26.712Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-114124 (GCVE-0-2026-114124)
Vulnerability from cvelistv5
Published
2026-10-21 17:03
Modified
2026-10-23 15:11
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process for macOS offscreen rendering was not fully validated by the main process. An attacker who had separately gained code execution in the GPU process could provide inconsistent frame geometry and cause the main process to read out-of-bounds memory while producing paint event images, disclosing memory or crashing the application. This issue is fixed in versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-114124",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-23T14:47:54.353531Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-23T15:11:35.835Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 42.11.6"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.7.3"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.4.3"
},
{
"status": "affected",
"version": "\u003e= 45.0.0-alpha.1, \u003c 45.0.0-alpha.9"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process for macOS offscreen rendering was not fully validated by the main process. An attacker who had separately gained code execution in the GPU process could provide inconsistent frame geometry and cause the main process to read out-of-bounds memory while producing paint event images, disclosing memory or crashing the application. This issue is fixed in versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T17:03:26.765Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-h3v5-h239-pg29",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-h3v5-h239-pg29"
},
{
"name": "https://github.com/electron/electron/pull/54033",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54033"
},
{
"name": "https://github.com/electron/electron/pull/54036",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54036"
},
{
"name": "https://github.com/electron/electron/pull/54037",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54037"
},
{
"name": "https://github.com/electron/electron/pull/54038",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54038"
},
{
"name": "https://github.com/electron/electron/pull/54047",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54047"
},
{
"name": "https://github.com/electron/electron/commit/24d8dbc661c6a109476ae59e9a2740b35d005cf4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/24d8dbc661c6a109476ae59e9a2740b35d005cf4"
},
{
"name": "https://github.com/electron/electron/commit/64ae597deda8956037387b439e6361f0fe936c86",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/64ae597deda8956037387b439e6361f0fe936c86"
},
{
"name": "https://github.com/electron/electron/commit/8d48be150c3fd53b0d02854124bdb7858598799c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/8d48be150c3fd53b0d02854124bdb7858598799c"
},
{
"name": "https://github.com/electron/electron/commit/d496507ffa1693edaa704a4be130fbcb8ecb4ada",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/d496507ffa1693edaa704a4be130fbcb8ecb4ada"
},
{
"name": "https://github.com/electron/electron/commit/d7f87070a8d738e561245d1ade4d6fbb082db80a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/d7f87070a8d738e561245d1ade4d6fbb082db80a"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.11.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.11.6"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.7.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.7.3"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.4.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.4.3"
},
{
"name": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.9"
}
],
"source": {
"advisory": "GHSA-h3v5-h239-pg29",
"discovery": "UNKNOWN"
},
"title": "Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-114124",
"datePublished": "2026-10-21T17:03:26.765Z",
"dateReserved": "2026-10-20T21:53:58.472Z",
"dateUpdated": "2026-10-23T15:11:35.835Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-114122 (GCVE-0-2026-114122)
Vulnerability from cvelistv5
Published
2026-10-21 16:26
Modified
2026-10-28 01:24
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process for webContents.beginFrameSubscription was not fully validated by the main process. An attacker who had separately gained code execution in the GPU process could supply inconsistent frame geometry and cause the main process to read out-of-bounds memory while producing captured frame images, disclosing memory or crashing the application. This issue is fixed in versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9.
References
| URL | Tags | |||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-114122",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-28T01:24:12.277204Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T01:24:21.033Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 42.11.6"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.7.3"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.4.3"
},
{
"status": "affected",
"version": "\u003e= 45.0.0-alpha.1, \u003c 45.0.0-alpha.9"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process for webContents.beginFrameSubscription was not fully validated by the main process. An attacker who had separately gained code execution in the GPU process could supply inconsistent frame geometry and cause the main process to read out-of-bounds memory while producing captured frame images, disclosing memory or crashing the application. This issue is fixed in versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:26:34.550Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-3qxv-5xgr-q7w9",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-3qxv-5xgr-q7w9"
},
{
"name": "https://github.com/electron/electron/pull/54036",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54036"
},
{
"name": "https://github.com/electron/electron/pull/54037",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54037"
},
{
"name": "https://github.com/electron/electron/pull/54038",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54038"
},
{
"name": "https://github.com/electron/electron/pull/54047",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54047"
},
{
"name": "https://github.com/electron/electron/commit/24d8dbc661c6a109476ae59e9a2740b35d005cf4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/24d8dbc661c6a109476ae59e9a2740b35d005cf4"
},
{
"name": "https://github.com/electron/electron/commit/64ae597deda8956037387b439e6361f0fe936c86",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/64ae597deda8956037387b439e6361f0fe936c86"
},
{
"name": "https://github.com/electron/electron/commit/8d48be150c3fd53b0d02854124bdb7858598799c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/8d48be150c3fd53b0d02854124bdb7858598799c"
},
{
"name": "https://github.com/electron/electron/commit/d496507ffa1693edaa704a4be130fbcb8ecb4ada",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/d496507ffa1693edaa704a4be130fbcb8ecb4ada"
},
{
"name": "https://github.com/electron/electron/commit/d7f87070a8d738e561245d1ade4d6fbb082db80a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/d7f87070a8d738e561245d1ade4d6fbb082db80a"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.11.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.11.6"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.7.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.7.3"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.4.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.4.3"
},
{
"name": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.9"
}
],
"source": {
"advisory": "GHSA-3qxv-5xgr-q7w9",
"discovery": "UNKNOWN"
},
"title": "Electron: Frame subscription trusts GPU-supplied frame geometry"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-114122",
"datePublished": "2026-10-21T16:26:34.550Z",
"dateReserved": "2026-10-20T21:53:58.472Z",
"dateUpdated": "2026-10-28T01:24:21.033Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-114121 (GCVE-0-2026-114121)
Vulnerability from cvelistv5
Published
2026-10-21 16:20
Modified
2026-10-28 17:07
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-346 - Origin Validation Error
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the requestingUrl passed to session.setPermissionRequestHandler to identify trusted content for a launch requested by untrusted content. An application that grants openExternal based on the requesting origin and allows untrusted content to open or navigate windows could therefore allow that content to launch an OS-registered external application. This issue is fixed in versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-114121",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-28T17:05:19.183486Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T17:07:09.957Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 42.11.3"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.7.0"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.3.0"
},
{
"status": "affected",
"version": "\u003e= 45.0.0-alpha.1, \u003c 45.0.0-alpha.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to open external protocol URLs could be attributed to a document other than the one that initiated them, causing the requestingUrl passed to session.setPermissionRequestHandler to identify trusted content for a launch requested by untrusted content. An application that grants openExternal based on the requesting origin and allows untrusted content to open or navigate windows could therefore allow that content to launch an OS-registered external application. This issue is fixed in versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:20:07.261Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-997q-gvvc-jwmx",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-997q-gvvc-jwmx"
},
{
"name": "https://github.com/electron/electron/pull/53682",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53682"
},
{
"name": "https://github.com/electron/electron/pull/53696",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53696"
},
{
"name": "https://github.com/electron/electron/pull/53697",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53697"
},
{
"name": "https://github.com/electron/electron/pull/53698",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53698"
},
{
"name": "https://github.com/electron/electron/pull/53699",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53699"
},
{
"name": "https://github.com/electron/electron/commit/25057643bf6d9a20bad69e45707551ccf546f5ce",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/25057643bf6d9a20bad69e45707551ccf546f5ce"
},
{
"name": "https://github.com/electron/electron/commit/8aa5414f73792ed3b2e3f9ab6391b1832e6dc2c3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/8aa5414f73792ed3b2e3f9ab6391b1832e6dc2c3"
},
{
"name": "https://github.com/electron/electron/commit/92a783952891805f2f82f344c40a6917b98a7d98",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/92a783952891805f2f82f344c40a6917b98a7d98"
},
{
"name": "https://github.com/electron/electron/commit/e0a20d5277b567aea8603f8e9852a4341407a586",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/e0a20d5277b567aea8603f8e9852a4341407a586"
},
{
"name": "https://github.com/electron/electron/commit/e3a400911084537bce7380ffea8af939572ce8dd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/e3a400911084537bce7380ffea8af939572ce8dd"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.11.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.11.3"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.7.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.7.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.3.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.3.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.5"
}
],
"source": {
"advisory": "GHSA-997q-gvvc-jwmx",
"discovery": "UNKNOWN"
},
"title": "Electron: openExternal permission requests can be attributed to the wrong origin"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-114121",
"datePublished": "2026-10-21T16:20:07.261Z",
"dateReserved": "2026-10-20T21:53:58.472Z",
"dateUpdated": "2026-10-28T17:07:09.957Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-113800 (GCVE-0-2026-113800)
Vulnerability from cvelistv5
Published
2026-10-21 16:16
Modified
2026-10-23 15:12
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-346 - Origin Validation Error
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, hid and usb permission checks made from an iframe caused setPermissionCheckHandler to receive the top-level frame's origin and details instead of the requesting frame's. An application that delegated hid or usb to a cross-origin untrusted iframe and allowed device access with origin-based logic could therefore grant that embedded frame access intended for the top-level page. This issue is fixed in versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-113800",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-23T14:47:52.711295Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-23T15:12:01.887Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 42.11.3"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.7.0"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.3.0"
},
{
"status": "affected",
"version": "\u003e= 45.0.0-alpha.1, \u003c 45.0.0-alpha.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, hid and usb permission checks made from an iframe caused setPermissionCheckHandler to receive the top-level frame\u0027s origin and details instead of the requesting frame\u0027s. An application that delegated hid or usb to a cross-origin untrusted iframe and allowed device access with origin-based logic could therefore grant that embedded frame access intended for the top-level page. This issue is fixed in versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:16:45.808Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-fw47-9c62-h3vw",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-fw47-9c62-h3vw"
},
{
"name": "https://github.com/electron/electron/pull/53656",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53656"
},
{
"name": "https://github.com/electron/electron/pull/53679",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53679"
},
{
"name": "https://github.com/electron/electron/pull/53688",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53688"
},
{
"name": "https://github.com/electron/electron/pull/53689",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53689"
},
{
"name": "https://github.com/electron/electron/pull/53736",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53736"
},
{
"name": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/22de0a3a06cfd3174fc6c59c3810ab5e1c91bf1a"
},
{
"name": "https://github.com/electron/electron/commit/36042b2e1b1c60c67b05ba0e95d1a34f608b9742",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/36042b2e1b1c60c67b05ba0e95d1a34f608b9742"
},
{
"name": "https://github.com/electron/electron/commit/56cc43eb677d46b86b0d3f49b5fba71404ab1ff0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/56cc43eb677d46b86b0d3f49b5fba71404ab1ff0"
},
{
"name": "https://github.com/electron/electron/commit/922073f8601479e93071f56f0745041291b206fd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/922073f8601479e93071f56f0745041291b206fd"
},
{
"name": "https://github.com/electron/electron/commit/c965cee73284c4b230a81d51a7db6115e55da8c0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/c965cee73284c4b230a81d51a7db6115e55da8c0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.11.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.11.3"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.7.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.7.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.3.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.3.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.5"
}
],
"source": {
"advisory": "GHSA-fw47-9c62-h3vw",
"discovery": "UNKNOWN"
},
"title": "Electron: HID and USB permission checks can be attributed to the wrong origin"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-113800",
"datePublished": "2026-10-21T16:16:45.808Z",
"dateReserved": "2026-10-20T17:39:41.373Z",
"dateUpdated": "2026-10-23T15:12:01.887Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-113798 (GCVE-0-2026-113798)
Vulnerability from cvelistv5
Published
2026-10-21 16:12
Modified
2026-10-28 01:22
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-346 - Origin Validation Error
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock permission requests from some cross-origin iframes caused session.setPermissionRequestHandler() to receive the top-level frame's requestingUrl and isMainFrame values instead of those of the requesting frame. An application that embeds untrusted iframe content and grants pointer lock based on the requesting origin could therefore grant the permission under the top-level page's identity. Applications that deny pointerLock for untrusted embedded content are not affected. This issue is fixed in versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-113798",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-28T01:22:01.029061Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T01:22:13.623Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 42.11.9"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.7.6"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.5.0"
},
{
"status": "affected",
"version": "\u003e= 45.0.0-alpha.1, \u003c 45.0.0-alpha.13"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock permission requests from some cross-origin iframes caused session.setPermissionRequestHandler() to receive the top-level frame\u0027s requestingUrl and isMainFrame values instead of those of the requesting frame. An application that embeds untrusted iframe content and grants pointer lock based on the requesting origin could therefore grant the permission under the top-level page\u0027s identity. Applications that deny pointerLock for untrusted embedded content are not affected. This issue is fixed in versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:12:35.548Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-x562-297c-g43g",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-x562-297c-g43g"
},
{
"name": "https://github.com/electron/electron/pull/54432",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54432"
},
{
"name": "https://github.com/electron/electron/pull/54463",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54463"
},
{
"name": "https://github.com/electron/electron/pull/54464",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54464"
},
{
"name": "https://github.com/electron/electron/pull/54465",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54465"
},
{
"name": "https://github.com/electron/electron/pull/54466",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/54466"
},
{
"name": "https://github.com/electron/electron/commit/076c7496791a45968cf8d9e76e9657bc161ea979",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/076c7496791a45968cf8d9e76e9657bc161ea979"
},
{
"name": "https://github.com/electron/electron/commit/0b680cfa1ffa70a50282da53efde37a210d5223b",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/0b680cfa1ffa70a50282da53efde37a210d5223b"
},
{
"name": "https://github.com/electron/electron/commit/1755ee598697356959219beefee1e139bc3f8207",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/1755ee598697356959219beefee1e139bc3f8207"
},
{
"name": "https://github.com/electron/electron/commit/4073e9f4712f61e6b8abd5548673cc7638f6c1a1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/4073e9f4712f61e6b8abd5548673cc7638f6c1a1"
},
{
"name": "https://github.com/electron/electron/commit/a48e6eaaafa85b6fc40f7431ceec4fd6ef4bb899",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/a48e6eaaafa85b6fc40f7431ceec4fd6ef4bb899"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.11.9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.11.9"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.7.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.7.6"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.5.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.5.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.13",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.13"
}
],
"source": {
"advisory": "GHSA-x562-297c-g43g",
"discovery": "UNKNOWN"
},
"title": "Electron: Pointer lock permission requests can be attributed to the wrong frame"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-113798",
"datePublished": "2026-10-21T16:12:35.548Z",
"dateReserved": "2026-10-20T17:39:41.373Z",
"dateUpdated": "2026-10-28T01:22:13.623Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-113797 (GCVE-0-2026-113797)
Vulnerability from cvelistv5
Published
2026-10-21 16:09
Modified
2026-10-28 17:04
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-862 - Missing Authorization
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.query() returned each tab's url and title to extensions that had neither the tabs permission nor matching host permissions. An application that loaded an extension it did not fully trust through session.extensions.loadExtension could therefore allow that extension to read the URL and title of every webContents in its session. This issue is fixed in versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-113797",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-28T17:03:51.085266Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-28T17:04:52.235Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 42.11.1"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.5.1"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.1.1"
},
{
"status": "affected",
"version": "\u003e= 45.0.0-alpha.1, \u003c 45.0.0-alpha.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.query() returned each tab\u0027s url and title to extensions that had neither the tabs permission nor matching host permissions. An application that loaded an extension it did not fully trust through session.extensions.loadExtension could therefore allow that extension to read the URL and title of every webContents in its session. This issue is fixed in versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:09:00.242Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-98mx-cjp9-gchm",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-98mx-cjp9-gchm"
},
{
"name": "https://github.com/electron/electron/pull/52597",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/52597"
},
{
"name": "https://github.com/electron/electron/pull/53353",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53353"
},
{
"name": "https://github.com/electron/electron/pull/53354",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53354"
},
{
"name": "https://github.com/electron/electron/pull/53355",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53355"
},
{
"name": "https://github.com/electron/electron/pull/53356",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53356"
},
{
"name": "https://github.com/electron/electron/commit/16e6103c1d84cd1c46336647b55e96414da501a4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/16e6103c1d84cd1c46336647b55e96414da501a4"
},
{
"name": "https://github.com/electron/electron/commit/5acc76667d32ff310d04f965b47983412ab6553c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/5acc76667d32ff310d04f965b47983412ab6553c"
},
{
"name": "https://github.com/electron/electron/commit/b1eb86ca8f6fa39fe9d5fee21bb9a0bf591a6a3f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/b1eb86ca8f6fa39fe9d5fee21bb9a0bf591a6a3f"
},
{
"name": "https://github.com/electron/electron/commit/d6529d65e5f096cd45bbb2828febb2c6baa53921",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/d6529d65e5f096cd45bbb2828febb2c6baa53921"
},
{
"name": "https://github.com/electron/electron/commit/f3ae30fab9aabfd445eedff4dd7a2f003eb1ff2f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/f3ae30fab9aabfd445eedff4dd7a2f003eb1ff2f"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.11.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.11.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.5.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.5.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.1.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.1.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.4"
}
],
"source": {
"advisory": "GHSA-98mx-cjp9-gchm",
"discovery": "UNKNOWN"
},
"title": "Electron: Extension tabs.query returns tab URLs and titles without the tabs permission"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-113797",
"datePublished": "2026-10-21T16:09:00.242Z",
"dateReserved": "2026-10-20T17:39:41.373Z",
"dateUpdated": "2026-10-28T17:04:52.235Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-113796 (GCVE-0-2026-113796)
Vulnerability from cvelistv5
Published
2026-10-21 16:04
Modified
2026-10-23 15:12
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-352 - Cross-Site Request Forgery (CSRF)
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.6, Electron treated pages opened into a new window from links as application-initiated navigations instead of preserving the page containing the link as the initiator. The resulting top-level request could be classified as same-site, causing SameSite=Strict cookies to be sent and Sec-Fetch-Site not to identify the initiating page. An application that loads untrusted content and permits it to open new windows could therefore allow that content to make a credentialed request to another site that relies on SameSite cookies for CSRF protection. This issue is fixed in versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.6.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-113796",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-23T14:47:51.057147Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-23T15:12:14.165Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 42.11.3"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.7.0"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.3.0"
},
{
"status": "affected",
"version": "\u003e= 45.0.0-alpha.1, \u003c 45.0.0-alpha.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.6, Electron treated pages opened into a new window from links as application-initiated navigations instead of preserving the page containing the link as the initiator. The resulting top-level request could be classified as same-site, causing SameSite=Strict cookies to be sent and Sec-Fetch-Site not to identify the initiating page. An application that loads untrusted content and permits it to open new windows could therefore allow that content to make a credentialed request to another site that relies on SameSite cookies for CSRF protection. This issue is fixed in versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.6."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "CWE-352: Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T16:04:42.688Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-2p8c-gr87-2676",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-2p8c-gr87-2676"
},
{
"name": "https://github.com/electron/electron/pull/53683",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53683"
},
{
"name": "https://github.com/electron/electron/pull/53717",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53717"
},
{
"name": "https://github.com/electron/electron/pull/53718",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53718"
},
{
"name": "https://github.com/electron/electron/pull/53719",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53719"
},
{
"name": "https://github.com/electron/electron/pull/53721",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/53721"
},
{
"name": "https://github.com/electron/electron/commit/079b9b1594ee62c336adc3aa430d4c1cf62bd51e",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/079b9b1594ee62c336adc3aa430d4c1cf62bd51e"
},
{
"name": "https://github.com/electron/electron/commit/0e6aca0618eeae50a18cfd50548b8688820629ed",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/0e6aca0618eeae50a18cfd50548b8688820629ed"
},
{
"name": "https://github.com/electron/electron/commit/652ef79ac79c6767b31e59b2f28d0d46114645e5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/652ef79ac79c6767b31e59b2f28d0d46114645e5"
},
{
"name": "https://github.com/electron/electron/commit/98940cb274bb6adcb7cdb2da2d4495ac83119670",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/98940cb274bb6adcb7cdb2da2d4495ac83119670"
},
{
"name": "https://github.com/electron/electron/commit/a86ae4205ba2ba7ae60a6caa9d5d3a44321f2f9b",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/a86ae4205ba2ba7ae60a6caa9d5d3a44321f2f9b"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.11.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.11.3"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.7.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.7.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.3.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.3.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v45.0.0-alpha.6"
}
],
"source": {
"advisory": "GHSA-2p8c-gr87-2676",
"discovery": "UNKNOWN"
},
"title": "Electron: SameSite cookie restrictions are not applied to windows opened from links"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-113796",
"datePublished": "2026-10-21T16:04:42.688Z",
"dateReserved": "2026-10-20T17:39:41.373Z",
"dateUpdated": "2026-10-23T15:12:14.165Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-102672 (GCVE-0-2026-102672)
Vulnerability from cvelistv5
Published
2026-10-13 15:52
Modified
2026-10-13 20:22
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The helper did not bind the validated update target to one canonical application-bundle path for the full installation, allowing a local attacker to redirect the root-level write so that it overwrites another application's files instead of the application that initiated the update. Applications on other platforms and macOS applications that do not use Squirrel.Mac-based automatic updates are not affected. This issue is fixed in versions 39.8.10, 41.10.5, and 42.0.0-beta.2.
References
| URL | Tags | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-102672",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T20:14:15.326288Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T20:22:22.127Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.10"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 41.10.5"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The helper did not bind the validated update target to one canonical application-bundle path for the full installation, allowing a local attacker to redirect the root-level write so that it overwrites another application\u0027s files instead of the application that initiated the update. Applications on other platforms and macOS applications that do not use Squirrel.Mac-based automatic updates are not affected. This issue is fixed in versions 39.8.10, 41.10.5, and 42.0.0-beta.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-367",
"description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T15:52:46.436Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-vv43-5jgx-7qv8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-vv43-5jgx-7qv8"
},
{
"name": "https://github.com/electron/electron/pull/50745",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50745"
},
{
"name": "https://github.com/electron/electron/commit/01faabfc250801a980fc94d64608046c67fc1cd9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/01faabfc250801a980fc94d64608046c67fc1cd9"
},
{
"name": "https://github.com/electron/electron/commit/15e2928a5c5f01759107b414010e220d90d59cef",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/15e2928a5c5f01759107b414010e220d90d59cef"
},
{
"name": "https://github.com/electron/electron/commit/a0f9ff4cc0340545008424232d49caadd9c0c767",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/a0f9ff4cc0340545008424232d49caadd9c0c767"
},
{
"name": "https://github.com/electron/electron/commit/b8f25c4cedb2e0f5f475912b709aba19c57c26be",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/b8f25c4cedb2e0f5f475912b709aba19c57c26be"
},
{
"name": "https://github.com/electron/electron/releases/tag/v39.8.10",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v39.8.10"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.10.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.10.5"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.2"
}
],
"source": {
"advisory": "GHSA-vv43-5jgx-7qv8",
"discovery": "UNKNOWN"
},
"title": "Electron: Local race condition in Squirrel.Mac update installation on macOS"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-102672",
"datePublished": "2026-10-13T15:52:46.436Z",
"dateReserved": "2026-09-29T16:10:04.075Z",
"dateUpdated": "2026-10-13T20:22:22.127Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-102677 (GCVE-0-2026-102677)
Vulnerability from cvelistv5
Published
2026-09-29 17:43
Modified
2026-10-02 12:18
Severity ?
VLAI Severity ?
EPSS score ?
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer could write attacker-controlled cache data and cause Electron to reuse it for a later load, executing the renderer's code in the more privileged preload context. The issue affects applications that load untrusted content. This issue is fixed in versions 42.10.0, 43.5.0, and 44.0.0-beta.6.
References
| URL | Tags | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-102677",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-02T12:18:07.959498Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-02T12:18:18.477Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003e= 42.3.3, \u003c 42.10.0"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-beta.1, \u003c 43.5.0"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.0.0-beta.6"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron\u0027s sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer could write attacker-controlled cache data and cause Electron to reuse it for a later load, executing the renderer\u0027s code in the more privileged preload context. The issue affects applications that load untrusted content. This issue is fixed in versions 42.10.0, 43.5.0, and 44.0.0-beta.6."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345: Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T17:43:26.960Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq"
},
{
"name": "https://github.com/electron/electron/pull/52480",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/52480"
},
{
"name": "https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601"
},
{
"name": "https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3"
},
{
"name": "https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.10.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.10.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.5.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.5.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.6"
}
],
"source": {
"advisory": "GHSA-qmv3-fv6v-rmhq",
"discovery": "UNKNOWN"
},
"title": "Electron: Sandboxed preload code cache can be poisoned by a compromised renderer"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-102677",
"datePublished": "2026-09-29T17:43:26.960Z",
"dateReserved": "2026-09-29T16:10:04.075Z",
"dateUpdated": "2026-10-02T12:18:18.477Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-102676 (GCVE-0-2026-102676)
Vulnerability from cvelistv5
Published
2026-09-29 16:56
Modified
2026-09-29 19:50
Severity ?
VLAI Severity ?
EPSS score ?
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron <webview> guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration disabled, allowing untrusted guest content to create a Node-enabled worker with more privilege than the embedder granted. Applications that do not enable the <webview> tag or that keep the embedder sandboxed are not affected. This issue is fixed in versions 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5.
References
| URL | Tags | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-102676",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-29T19:50:13.282220Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T19:50:28.382Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 41.10.6"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.9.2"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.4.1"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.0.0-beta.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron \u003cwebview\u003e guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration disabled, allowing untrusted guest content to create a Node-enabled worker with more privilege than the embedder granted. Applications that do not enable the \u003cwebview\u003e tag or that keep the embedder sandboxed are not affected. This issue is fixed in versions 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269: Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-1188",
"description": "CWE-1188: Insecure Default Initialization of Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T16:56:49.007Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-9qh4-3jw8-366w",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-9qh4-3jw8-366w"
},
{
"name": "https://github.com/electron/electron/commit/6462a2e1dc4e6adffd3b7d9b9be1474c45dcbbe2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/6462a2e1dc4e6adffd3b7d9b9be1474c45dcbbe2"
},
{
"name": "https://github.com/electron/electron/commit/9a675aef8822bae4088567822969f900b3a37671",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/9a675aef8822bae4088567822969f900b3a37671"
},
{
"name": "https://github.com/electron/electron/commit/b3ae0aab5cf81c2ed03d04df1ae8e69ecfab7886",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/b3ae0aab5cf81c2ed03d04df1ae8e69ecfab7886"
},
{
"name": "https://github.com/electron/electron/commit/cd34f335c8664613db5b6e61ae51e2e1846233ae",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/cd34f335c8664613db5b6e61ae51e2e1846233ae"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.10.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.10.6"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.9.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.9.2"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.4.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.4.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.5"
}
],
"source": {
"advisory": "GHSA-9qh4-3jw8-366w",
"discovery": "UNKNOWN"
},
"title": "Electron: \u003cwebview\u003e can enable Node.js integration in Web Workers despite embedder restrictions"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-102676",
"datePublished": "2026-09-29T16:56:49.007Z",
"dateReserved": "2026-09-29T16:10:04.075Z",
"dateUpdated": "2026-09-29T19:50:28.382Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-102675 (GCVE-0-2026-102675)
Vulnerability from cvelistv5
Published
2026-09-29 16:54
Modified
2026-09-29 17:26
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-346 - Origin Validation Error
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, responses served through protocol.registerFileProtocol or protocol.registerHttpProtocol for a custom scheme registered with supportFetchAPI enabled but corsEnabled disabled could remain script-readable across origins. This residual issue completes the remediation for CVE-2026-70604. Applications are affected only when they expose such a scheme and load untrusted content in the same session. Schemes intentionally registered with corsEnabled enabled remain cross-origin readable by design. This issue is fixed in versions 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5.
References
| URL | Tags | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-102675",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-29T17:25:31.410322Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T17:26:51.547Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 41.10.6"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.9.2"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.4.1"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.0.0-beta.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, responses served through protocol.registerFileProtocol or protocol.registerHttpProtocol for a custom scheme registered with supportFetchAPI enabled but corsEnabled disabled could remain script-readable across origins. This residual issue completes the remediation for CVE-2026-70604. Applications are affected only when they expose such a scheme and load untrusted content in the same session. Schemes intentionally registered with corsEnabled enabled remain cross-origin readable by design. This issue is fixed in versions 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T16:54:29.218Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-j84w-jfhq-vhvj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-j84w-jfhq-vhvj"
},
{
"name": "https://github.com/electron/electron/commit/4d2784cc8592471ee2276235b8c2a03efddf937d",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/4d2784cc8592471ee2276235b8c2a03efddf937d"
},
{
"name": "https://github.com/electron/electron/commit/80178e4631cb2f6a5e42f8e793b2ae9624e78a0d",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/80178e4631cb2f6a5e42f8e793b2ae9624e78a0d"
},
{
"name": "https://github.com/electron/electron/commit/c595b05976e7a885465b043d17e00a92fc3c3397",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/c595b05976e7a885465b043d17e00a92fc3c3397"
},
{
"name": "https://github.com/electron/electron/commit/ef75c4b98caaa3ebc615f1eba302027028ee04d2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/ef75c4b98caaa3ebc615f1eba302027028ee04d2"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.10.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.10.6"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.9.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.9.2"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.4.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.4.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.5"
}
],
"source": {
"advisory": "GHSA-j84w-jfhq-vhvj",
"discovery": "UNKNOWN"
},
"title": "Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-102675",
"datePublished": "2026-09-29T16:54:29.218Z",
"dateReserved": "2026-09-29T16:10:04.075Z",
"dateUpdated": "2026-09-29T17:26:51.547Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-102674 (GCVE-0-2026-102674)
Vulnerability from cvelistv5
Published
2026-09-29 16:51
Modified
2026-09-29 17:20
Severity ?
VLAI Severity ?
EPSS score ?
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, windows opened from a sandboxed top-level document did not inherit that document's active HTML sandbox restrictions. Untrusted content in a sandboxed top-level document that was permitted to open popups could therefore create a window with the Electron application's full origin instead of the restricted origin intended by the sandbox. Applications that deny such popups with setWindowOpenHandler are not affected. This issue is fixed in versions 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5.
References
| URL | Tags | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-102674",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-29T17:20:28.745285Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T17:20:35.969Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 41.10.6"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.9.2"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.4.1"
},
{
"status": "affected",
"version": "\u003e= 44.0.0-alpha.1, \u003c 44.0.0-beta.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, windows opened from a sandboxed top-level document did not inherit that document\u0027s active HTML sandbox restrictions. Untrusted content in a sandboxed top-level document that was permitted to open popups could therefore create a window with the Electron application\u0027s full origin instead of the restricted origin intended by the sandbox. Applications that deny such popups with setWindowOpenHandler are not affected. This issue is fixed in versions 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-266",
"description": "CWE-266: Incorrect Privilege Assignment",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693: Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T16:51:26.963Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-gr2m-v5gq-v685",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-gr2m-v5gq-v685"
},
{
"name": "https://github.com/electron/electron/commit/29fc130569f970e91e355383821a4af0f25724a2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/29fc130569f970e91e355383821a4af0f25724a2"
},
{
"name": "https://github.com/electron/electron/commit/3ecf3e74f4be6e2360644679b0b4698742be0e1d",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/3ecf3e74f4be6e2360644679b0b4698742be0e1d"
},
{
"name": "https://github.com/electron/electron/commit/6594d5a5b074cf501da084dc7908d3df0d68a886",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/6594d5a5b074cf501da084dc7908d3df0d68a886"
},
{
"name": "https://github.com/electron/electron/commit/e9c4d3cbe912e18d7c63af78e63e98ae7a48cd3a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/e9c4d3cbe912e18d7c63af78e63e98ae7a48cd3a"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.10.6",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.10.6"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.9.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.9.2"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.4.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.4.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.5"
}
],
"source": {
"advisory": "GHSA-gr2m-v5gq-v685",
"discovery": "UNKNOWN"
},
"title": "Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-102674",
"datePublished": "2026-09-29T16:51:26.963Z",
"dateReserved": "2026-09-29T16:10:04.075Z",
"dateUpdated": "2026-09-29T17:20:35.969Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-102673 (GCVE-0-2026-102673)
Vulnerability from cvelistv5
Published
2026-09-29 16:38
Modified
2026-09-30 20:11
Severity ?
VLAI Severity ?
EPSS score ?
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.4, 42.5.2, and 43.0.0, popups opened from a sandboxed iframe through Electron's OpenURLFromTab navigation path, including links using target="_blank" or a middle-click, did not receive the inherited HTML sandbox restrictions. An untrusted iframe using the allow-scripts allow-popups configuration could therefore open a popup with the embedding application's full origin, exposing that origin's cookies, storage, and same-origin scripting capabilities. Applications that do not embed untrusted content in sandboxed iframes are not affected. This issue is fixed in versions 41.10.4, 42.5.2, and 43.0.0.
References
| URL | Tags | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-102673",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-30T19:34:09.694143Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-30T20:11:08.290Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 41.10.4"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.5.2"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.0.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.4, 42.5.2, and 43.0.0, popups opened from a sandboxed iframe through Electron\u0027s OpenURLFromTab navigation path, including links using target=\"_blank\" or a middle-click, did not receive the inherited HTML sandbox restrictions. An untrusted iframe using the allow-scripts allow-popups configuration could therefore open a popup with the embedding application\u0027s full origin, exposing that origin\u0027s cookies, storage, and same-origin scripting capabilities. Applications that do not embed untrusted content in sandboxed iframes are not affected. This issue is fixed in versions 41.10.4, 42.5.2, and 43.0.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693: Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T16:38:41.946Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-hq2x-r82h-9wj4",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-hq2x-r82h-9wj4"
},
{
"name": "https://github.com/electron/electron/pull/52133",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/52133"
},
{
"name": "https://github.com/electron/electron/commit/7ea14d5f55ecb11a30447701ddca16b3feee0bba",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/7ea14d5f55ecb11a30447701ddca16b3feee0bba"
},
{
"name": "https://github.com/electron/electron/commit/e26b2640e7795c42bfb111b76009cbb4327c9a69",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/e26b2640e7795c42bfb111b76009cbb4327c9a69"
},
{
"name": "https://github.com/electron/electron/commit/ebe1165ee2b05c203c26dd2244ef1c5b9b1c04da",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/ebe1165ee2b05c203c26dd2244ef1c5b9b1c04da"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.10.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.10.4"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.5.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.5.2"
},
{
"name": "https://github.com/electron/electron/releases/tag/v43.0.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v43.0.0"
}
],
"source": {
"advisory": "GHSA-hq2x-r82h-9wj4",
"discovery": "UNKNOWN"
},
"title": "Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-102673",
"datePublished": "2026-09-29T16:38:41.946Z",
"dateReserved": "2026-09-29T16:10:04.075Z",
"dateUpdated": "2026-09-30T20:11:08.290Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70612 (GCVE-0-2026-70612)
Vulnerability from cvelistv5
Published
2026-08-05 17:56
Modified
2026-08-05 19:03
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-284 - Improper Access Control
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, requests to open external protocol URLs from web content did not take iframe sandbox restrictions into account, so a sandboxed iframe could cause an OS-registered external application to be launched. The frame sandbox state was also not made available to the app permission handlers, affecting apps that render untrusted content in sandboxed iframes and grant the openExternal permission by default when no setPermissionRequestHandler is installed. This issue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70612",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T19:03:22.677858Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T19:03:29.121Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.8"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.0"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.1"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, requests to open external protocol URLs from web content did not take iframe sandbox restrictions into account, so a sandboxed iframe could cause an OS-registered external application to be launched. The frame sandbox state was also not made available to the app permission handlers, affecting apps that render untrusted content in sandboxed iframes and grant the openExternal permission by default when no setPermissionRequestHandler is installed. This issue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284: Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T17:56:41.464Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-p2rr-rvmm-c5fp",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-p2rr-rvmm-c5fp"
},
{
"name": "https://github.com/electron/electron/pull/50961",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50961"
},
{
"name": "https://github.com/electron/electron/pull/50962",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50962"
},
{
"name": "https://github.com/electron/electron/pull/50963",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50963"
},
{
"name": "https://github.com/electron/electron/pull/50964",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50964"
},
{
"name": "https://github.com/electron/electron/commit/08b9d0a220e267d1a2402a44bdd01a2e9aa320b5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/08b9d0a220e267d1a2402a44bdd01a2e9aa320b5"
},
{
"name": "https://github.com/electron/electron/commit/2764e4c35168855f614876051823db4f58a3714a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/2764e4c35168855f614876051823db4f58a3714a"
},
{
"name": "https://github.com/electron/electron/commit/477dcf7afc6550715f9ec5e6f39ee38e5dd7bf39",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/477dcf7afc6550715f9ec5e6f39ee38e5dd7bf39"
},
{
"name": "https://github.com/electron/electron/commit/c39e3d5687d57434c8d5fe814c5152efd2f631c3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/c39e3d5687d57434c8d5fe814c5152efd2f631c3"
},
{
"name": "https://github.com/electron/electron/releases/tag/v39.8.8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v39.8.8"
},
{
"name": "https://github.com/electron/electron/releases/tag/v40.9.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v40.9.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.2.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.2.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.3"
}
],
"source": {
"advisory": "GHSA-p2rr-rvmm-c5fp",
"discovery": "UNKNOWN"
},
"title": "Electron: Sandboxed iframes can launch external protocol handlers"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70612",
"datePublished": "2026-08-05T17:56:41.464Z",
"dateReserved": "2026-08-04T19:50:27.329Z",
"dateUpdated": "2026-08-05T19:03:29.121Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70611 (GCVE-0-2026-70611)
Vulnerability from cvelistv5
Published
2026-08-05 17:49
Modified
2026-08-06 03:55
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3, the DevTools reveal in file manager action could launch the target file rather than reveal it. An attacker with a separate means of running script inside the DevTools frontend, such as a malicious DevTools extension, could use showItemInFolder handling to execute native code outside the sandbox when DevTools is opened for windows exposed to untrusted content or untrusted DevTools extensions. This issue is fixed in 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70611",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T03:55:50.649Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.9"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.2"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.1"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3, the DevTools reveal in file manager action could launch the target file rather than reveal it. An attacker with a separate means of running script inside the DevTools frontend, such as a malicious DevTools extension, could use showItemInFolder handling to execute native code outside the sandbox when DevTools is opened for windows exposed to untrusted content or untrusted DevTools extensions. This issue is fixed in 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T17:49:09.144Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-f2r8-jv7c-xqmp",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-f2r8-jv7c-xqmp"
},
{
"name": "https://github.com/electron/electron/pull/50937",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50937"
},
{
"name": "https://github.com/electron/electron/pull/50938",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50938"
},
{
"name": "https://github.com/electron/electron/pull/51114",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/51114"
},
{
"name": "https://github.com/electron/electron/pull/51115",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/51115"
},
{
"name": "https://github.com/electron/electron/commit/10fb5b39c5287f70c4bbcab4c24197f3871ec322",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/10fb5b39c5287f70c4bbcab4c24197f3871ec322"
},
{
"name": "https://github.com/electron/electron/commit/1b8a298d629d5a642c816ea5f7505359de17b771",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/1b8a298d629d5a642c816ea5f7505359de17b771"
},
{
"name": "https://github.com/electron/electron/commit/27bf1cae9274d5025684c7268496f435b7e06b44",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/27bf1cae9274d5025684c7268496f435b7e06b44"
},
{
"name": "https://github.com/electron/electron/commit/7a1eb7e5585991b3726cedb890a6244f327f43de",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/7a1eb7e5585991b3726cedb890a6244f327f43de"
},
{
"name": "https://github.com/electron/electron/releases/tag/v39.8.9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v39.8.9"
},
{
"name": "https://github.com/electron/electron/releases/tag/v40.9.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v40.9.2"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.2.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.2.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.3"
}
],
"source": {
"advisory": "GHSA-f2r8-jv7c-xqmp",
"discovery": "UNKNOWN"
},
"title": "Electron: DevTools embedder handler executes arbitrary files via shell open"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70611",
"datePublished": "2026-08-05T17:49:09.144Z",
"dateReserved": "2026-08-04T19:50:27.329Z",
"dateUpdated": "2026-08-06T03:55:50.649Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70610 (GCVE-0-2026-70610)
Vulnerability from cvelistv5
Published
2026-08-05 17:41
Modified
2026-08-06 14:31
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.4, objects copied across the contextBridge boundary from untrusted content could carry an attacker-influenced prototype, enabling prototype-pollution-style attacks against preload code despite context isolation being enabled. Apps are only affected if their preload code accepts object arguments from untrusted content and reads properties from them without own-property checks, while apps that only accept primitive arguments or validate object arguments are not affected. This issue is fixed in 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.4.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70610",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-06T14:30:58.717300Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T14:31:10.761Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.9"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.2"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.2"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.4, objects copied across the contextBridge boundary from untrusted content could carry an attacker-influenced prototype, enabling prototype-pollution-style attacks against preload code despite context isolation being enabled. Apps are only affected if their preload code accepts object arguments from untrusted content and reads properties from them without own-property checks, while apps that only accept primitive arguments or validate object arguments are not affected. This issue is fixed in 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.4."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1321",
"description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T17:41:03.016Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-ff2p-hmqr-hxm4",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-ff2p-hmqr-hxm4"
},
{
"name": "https://github.com/electron/electron/pull/51083",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/51083"
},
{
"name": "https://github.com/electron/electron/pull/51084",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/51084"
},
{
"name": "https://github.com/electron/electron/pull/51085",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/51085"
},
{
"name": "https://github.com/electron/electron/pull/51086",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/51086"
},
{
"name": "https://github.com/electron/electron/commit/17d5d26499cd279fab48f5f26527f8edc02a7713",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/17d5d26499cd279fab48f5f26527f8edc02a7713"
},
{
"name": "https://github.com/electron/electron/commit/23a6efb714dec80e2cf45d3054d18d701162e4dd",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/23a6efb714dec80e2cf45d3054d18d701162e4dd"
},
{
"name": "https://github.com/electron/electron/commit/4ac50292d552fb510eb778392620c85308770a55",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/4ac50292d552fb510eb778392620c85308770a55"
},
{
"name": "https://github.com/electron/electron/commit/5b699544cbbed51bedb7c60d75c8c42be5825737",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/5b699544cbbed51bedb7c60d75c8c42be5825737"
},
{
"name": "https://github.com/electron/electron/releases/tag/v39.8.9",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v39.8.9"
},
{
"name": "https://github.com/electron/electron/releases/tag/v40.9.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v40.9.2"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.2.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.2.2"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.4"
}
],
"source": {
"advisory": "GHSA-ff2p-hmqr-hxm4",
"discovery": "UNKNOWN"
},
"title": "Electron: contextBridge object copy honors prototype setters"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70610",
"datePublished": "2026-08-05T17:41:03.016Z",
"dateReserved": "2026-08-04T19:50:27.329Z",
"dateUpdated": "2026-08-06T14:31:10.761Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70609 (GCVE-0-2026-70609)
Vulnerability from cvelistv5
Published
2026-08-05 17:32
Modified
2026-08-06 03:55
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, the mode option of webContents.openDevTools() was not sanitized before use by the DevTools frontend. If an attacker can influence this value, script under their control may run in the DevTools context, which in unsandboxed configurations has access to Node.js, including when untrusted input reaches the mode argument of openDevTools() or untrusted content calls openDevTools() on a webview it embeds. This issue is fixed in 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70609",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T03:55:49.348Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.7"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.0"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.0"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, the mode option of webContents.openDevTools() was not sanitized before use by the DevTools frontend. If an attacker can influence this value, script under their control may run in the DevTools context, which in unsandboxed configurations has access to Node.js, including when untrusted input reaches the mode argument of openDevTools() or untrusted content calls openDevTools() on a webview it embeds. This issue is fixed in 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-116",
"description": "CWE-116: Improper Encoding or Escaping of Output",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T17:32:21.067Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-4f78-qhmw-8j8m",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-4f78-qhmw-8j8m"
},
{
"name": "https://github.com/electron/electron/pull/50665",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50665"
},
{
"name": "https://github.com/electron/electron/pull/50666",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50666"
},
{
"name": "https://github.com/electron/electron/pull/50667",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50667"
},
{
"name": "https://github.com/electron/electron/pull/50668",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50668"
},
{
"name": "https://github.com/electron/electron/commit/04614eed17986bddc43eb509ec870424ee6a47d1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/04614eed17986bddc43eb509ec870424ee6a47d1"
},
{
"name": "https://github.com/electron/electron/commit/2046ae87731d80a7b535512ae19acb529e10e33b",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/2046ae87731d80a7b535512ae19acb529e10e33b"
},
{
"name": "https://github.com/electron/electron/commit/969741f9f847c5c583f6bbc63ca22549dbd954ce",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/969741f9f847c5c583f6bbc63ca22549dbd954ce"
},
{
"name": "https://github.com/electron/electron/commit/efc4d3c6b6f1c04f658ca0d9d2512dcfe78eb7ba",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/efc4d3c6b6f1c04f658ca0d9d2512dcfe78eb7ba"
},
{
"name": "https://github.com/electron/electron/releases/tag/v39.8.7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v39.8.7"
},
{
"name": "https://github.com/electron/electron/releases/tag/v40.9.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v40.9.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.2.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.2.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.1"
}
],
"source": {
"advisory": "GHSA-4f78-qhmw-8j8m",
"discovery": "UNKNOWN"
},
"title": "Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70609",
"datePublished": "2026-08-05T17:32:21.067Z",
"dateReserved": "2026-08-04T19:50:27.329Z",
"dateUpdated": "2026-08-06T03:55:49.348Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70608 (GCVE-0-2026-70608)
Vulnerability from cvelistv5
Published
2026-08-05 17:27
Modified
2026-08-05 18:46
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.3, and 42.0.1, a sandboxed iframe without the allow-popups keyword could still open a new window or trigger setWindowOpenHandler with no user interaction because new-window navigations taking the OpenURL path did not apply the iframe sandbox popup restriction. Apps that embed untrusted content in sandboxed iframes and rely on the absence of allow-popups to prevent window creation are affected, while apps that deny window creation in setWindowOpenHandler or do not embed untrusted content in sandboxed iframes are not affected. This issue is fixed in 39.8.10, 41.10.3, and 42.0.1.
References
| URL | Tags | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70608",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T18:14:00.193334Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T18:46:49.877Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.10"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 41.10.3"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.3, and 42.0.1, a sandboxed iframe without the allow-popups keyword could still open a new window or trigger setWindowOpenHandler with no user interaction because new-window navigations taking the OpenURL path did not apply the iframe sandbox popup restriction. Apps that embed untrusted content in sandboxed iframes and rely on the absence of allow-popups to prevent window creation are affected, while apps that deny window creation in setWindowOpenHandler or do not embed untrusted content in sandboxed iframes are not affected. This issue is fixed in 39.8.10, 41.10.3, and 42.0.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693: Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-1021",
"description": "CWE-1021: Improper Restriction of Rendered UI Layers or Frames",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T17:27:15.743Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-9f4c-93c8-jc8g",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-9f4c-93c8-jc8g"
},
{
"name": "https://github.com/electron/electron/pull/51437",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/51437"
},
{
"name": "https://github.com/electron/electron/pull/51438",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/51438"
},
{
"name": "https://github.com/electron/electron/pull/51439",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/51439"
},
{
"name": "https://github.com/electron/electron/commit/3ff23c52ab364a0afc6ab5bd7851291d3159de57",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/3ff23c52ab364a0afc6ab5bd7851291d3159de57"
},
{
"name": "https://github.com/electron/electron/commit/57cbe329c4ae8aab5ac5ebdcb588adc9a11de0d3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/57cbe329c4ae8aab5ac5ebdcb588adc9a11de0d3"
},
{
"name": "https://github.com/electron/electron/commit/68cf8b7d9122260f6b534a69a82c701a56cf159f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/68cf8b7d9122260f6b534a69a82c701a56cf159f"
},
{
"name": "https://github.com/electron/electron/releases/tag/v39.8.10",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v39.8.10"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.10.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.10.3"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.0.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.0.1"
}
],
"source": {
"advisory": "GHSA-9f4c-93c8-jc8g",
"discovery": "UNKNOWN"
},
"title": "Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70608",
"datePublished": "2026-08-05T17:27:15.743Z",
"dateReserved": "2026-08-04T19:50:27.329Z",
"dateUpdated": "2026-08-05T18:46:49.877Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70607 (GCVE-0-2026-70607)
Vulnerability from cvelistv5
Published
2026-08-05 16:24
Modified
2026-08-05 18:27
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-20 - Improper Input Validation
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, some window options supplied by web content in the window.open() features string were applied to the new BrowserWindow without an allowlist. Untrusted content could set window options it should not control, including options that cause the main process to access attacker-chosen file or network paths, when untrusted content can call window.open() and the app does not override child window options via setWindowOpenHandler or overrideBrowserWindowOptions. This issue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.
References
| URL | Tags | ||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70607",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T18:27:03.596456Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T18:27:13.014Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.8"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.0"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.1"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, some window options supplied by web content in the window.open() features string were applied to the new BrowserWindow without an allowlist. Untrusted content could set window options it should not control, including options that cause the main process to access attacker-chosen file or network paths, when untrusted content can call window.open() and the app does not override child window options via setWindowOpenHandler or overrideBrowserWindowOptions. This issue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T16:24:11.939Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-v93f-fgjr-hjrj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-v93f-fgjr-hjrj"
},
{
"name": "https://github.com/electron/electron/pull/50946",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50946"
},
{
"name": "https://github.com/electron/electron/pull/50947",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50947"
},
{
"name": "https://github.com/electron/electron/pull/50948",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50948"
},
{
"name": "https://github.com/electron/electron/pull/50949",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/pull/50949"
},
{
"name": "https://github.com/electron/electron/commit/30cf3882de75ee651bd4e5f27002f13fd3d3163a",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/30cf3882de75ee651bd4e5f27002f13fd3d3163a"
},
{
"name": "https://github.com/electron/electron/commit/4eff3dc09e4d1e62d649c5ce9902f532bb7469c7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/4eff3dc09e4d1e62d649c5ce9902f532bb7469c7"
},
{
"name": "https://github.com/electron/electron/commit/615d62500fc7732d068274b796c49487e652e90b",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/615d62500fc7732d068274b796c49487e652e90b"
},
{
"name": "https://github.com/electron/electron/commit/fe2e7d0073949b4593b624b93abf1788f5377e55",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/fe2e7d0073949b4593b624b93abf1788f5377e55"
},
{
"name": "https://github.com/electron/electron/releases/tag/v39.8.8",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v39.8.8"
},
{
"name": "https://github.com/electron/electron/releases/tag/v40.9.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v40.9.0"
},
{
"name": "https://github.com/electron/electron/releases/tag/v41.2.1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v41.2.1"
},
{
"name": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/releases/tag/v42.0.0-beta.3"
}
],
"source": {
"advisory": "GHSA-v93f-fgjr-hjrj",
"discovery": "UNKNOWN"
},
"title": "Electron: window.open features string controls some window options considered privileged"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70607",
"datePublished": "2026-08-05T16:24:11.939Z",
"dateReserved": "2026-08-04T19:50:27.329Z",
"dateUpdated": "2026-08-05T18:27:13.014Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70606 (GCVE-0-2026-70606)
Vulnerability from cvelistv5
Published
2026-08-05 16:07
Modified
2026-08-05 17:23
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-668 - Exposure of Resource to Wrong Sphere
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0.0, when a custom protocol handler returned a ProtocolResponse with a url and no session, Electron made the upstream request through defaultSession instead of the session that handled the protocol. A cached response could then be reused across otherwise isolated session partitions. Apps that use ProtocolResponse.url, omit ProtocolResponse.session, and rely on separate sessions to isolate content are affected. This issue is fixed in versions 40.10.6, 41.9.1, 42.5.1, and 43.0.0.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70606",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T17:15:44.765454Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T17:23:30.639Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.10.6"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.9.1"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.5.1"
},
{
"status": "affected",
"version": "\u003e= 43.0.0-alpha.1, \u003c 43.0.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0.0, when a custom protocol handler returned a ProtocolResponse with a url and no session, Electron made the upstream request through defaultSession instead of the session that handled the protocol. A cached response could then be reused across otherwise isolated session partitions. Apps that use ProtocolResponse.url, omit ProtocolResponse.session, and rely on separate sessions to isolate content are affected. This issue is fixed in versions 40.10.6, 41.9.1, 42.5.1, and 43.0.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-668",
"description": "CWE-668: Exposure of Resource to Wrong Sphere",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T16:07:46.008Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-r4w5-6pfg-jxp5",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-r4w5-6pfg-jxp5"
}
],
"source": {
"advisory": "GHSA-r4w5-6pfg-jxp5",
"discovery": "UNKNOWN"
},
"title": "Electron: ProtocolResponse.url reuses the default session cache instead of the registering session"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70606",
"datePublished": "2026-08-05T16:07:46.008Z",
"dateReserved": "2026-08-04T19:50:27.328Z",
"dateUpdated": "2026-08-05T17:23:30.639Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70605 (GCVE-0-2026-70605)
Vulnerability from cvelistv5
Published
2026-08-05 16:04
Modified
2026-08-06 14:24
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, when following HTTP redirects, net.fetch() and net.request() did not restrict which schemes a redirect could target. A remote server could redirect a request to a local resource, and if the app returns or forwards the response body, local file contents could be disclosed. Apps are only affected if they make net requests to attacker-influenced URLs with redirects followed and expose the response body. This issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70605",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-06T14:23:48.944947Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T14:24:06.012Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.8"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.0"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.1"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, when following HTTP redirects, net.fetch() and net.request() did not restrict which schemes a redirect could target. A remote server could redirect a request to a local resource, and if the app returns or forwards the response body, local file contents could be disclosed. Apps are only affected if they make net requests to attacker-influenced URLs with redirects followed and expose the response body. This issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T16:04:12.428Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-v64r-4m7r-3mvq",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-v64r-4m7r-3mvq"
}
],
"source": {
"advisory": "GHSA-v64r-4m7r-3mvq",
"discovery": "UNKNOWN"
},
"title": "Electron: HTTP redirect followed into local file loader"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70605",
"datePublished": "2026-08-05T16:04:12.428Z",
"dateReserved": "2026-08-04T19:50:27.328Z",
"dateUpdated": "2026-08-06T14:24:06.012Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70604 (GCVE-0-2026-70604)
Vulnerability from cvelistv5
Published
2026-08-05 15:59
Modified
2026-08-05 18:41
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-942 - Permissive Cross-domain Policy with Untrusted Domains
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.3, 41.4.0, and 42.0.0, a custom scheme registered with supportFetchAPI: true but without corsEnabled: true was not subject to CORS enforcement. A page loaded from a remote origin could therefore fetch() or XMLHttpRequest that scheme cross-origin and read the full response body, rather than the read being blocked. Apps that serve sensitive data from such a scheme and load remote or untrusted content in a renderer are affected. This issue is fixed in versions 39.8.10, 40.9.3, 41.4.0, and 42.0.0.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70604",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T18:13:52.321211Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T18:41:32.481Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.10"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.3"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.4.0"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.3, 41.4.0, and 42.0.0, a custom scheme registered with supportFetchAPI: true but without corsEnabled: true was not subject to CORS enforcement. A page loaded from a remote origin could therefore fetch() or XMLHttpRequest that scheme cross-origin and read the full response body, rather than the read being blocked. Apps that serve sensitive data from such a scheme and load remote or untrusted content in a renderer are affected. This issue is fixed in versions 39.8.10, 40.9.3, 41.4.0, and 42.0.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942: Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T15:59:24.043Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-v3j7-r9gq-3gjw",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-v3j7-r9gq-3gjw"
}
],
"source": {
"advisory": "GHSA-v3j7-r9gq-3gjw",
"discovery": "UNKNOWN"
},
"title": "Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70604",
"datePublished": "2026-08-05T15:59:24.043Z",
"dateReserved": "2026-08-04T19:50:27.328Z",
"dateUpdated": "2026-08-05T18:41:32.481Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70603 (GCVE-0-2026-70603)
Vulnerability from cvelistv5
Published
2026-08-05 15:56
Modified
2026-08-06 03:55
Severity ?
VLAI Severity ?
EPSS score ?
CWE
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1, shell.openPath() did not reject paths containing embedded null bytes. Apps that perform string-only validation of file paths, for example checking the file extension, before passing them to shell.openPath() could be bypassed, allowing an attacker-controlled path to open a different file than the one that passed validation. Apps are only affected if they pass paths derived from untrusted input to shell.openPath() and rely on string-based validation without a filesystem check. This issue is fixed in versions 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70603",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T03:55:27.402Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.6"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.0"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.1.1"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1, shell.openPath() did not reject paths containing embedded null bytes. Apps that perform string-only validation of file paths, for example checking the file extension, before passing them to shell.openPath() could be bypassed, allowing an attacker-controlled path to open a different file than the one that passed validation. Apps are only affected if they pass paths derived from untrusted input to shell.openPath() and rely on string-based validation without a filesystem check. This issue is fixed in versions 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-158",
"description": "CWE-158: Improper Neutralization of Null Byte or NUL Character",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T15:56:50.574Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-5c9j-mhmv-5xgx",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-5c9j-mhmv-5xgx"
}
],
"source": {
"advisory": "GHSA-5c9j-mhmv-5xgx",
"discovery": "UNKNOWN"
},
"title": "Electron: shell.openPath path validation bypass via embedded null byte"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70603",
"datePublished": "2026-08-05T15:56:50.574Z",
"dateReserved": "2026-08-04T19:50:27.328Z",
"dateUpdated": "2026-08-06T03:55:27.402Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70602 (GCVE-0-2026-70602)
Vulnerability from cvelistv5
Published
2026-08-05 15:54
Modified
2026-08-05 16:13
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-284 - Improper Access Control
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, extension tab and scripting APIs were not scoped to the extension's own session. A malicious or compromised extension loaded into one session could navigate, script, and read from windows belonging to a different session. Apps are only affected if they load Chrome extensions via session.loadExtension and rely on separate sessions to isolate that extension from other content. This issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70602",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T16:12:59.028629Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T16:13:06.513Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.8"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.0"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.1"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, extension tab and scripting APIs were not scoped to the extension\u0027s own session. A malicious or compromised extension loaded into one session could navigate, script, and read from windows belonging to a different session. Apps are only affected if they load Chrome extensions via session.loadExtension and rely on separate sessions to isolate that extension from other content. This issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284: Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T15:54:49.931Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-m55f-7gqj-fr98",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-m55f-7gqj-fr98"
}
],
"source": {
"advisory": "GHSA-m55f-7gqj-fr98",
"discovery": "UNKNOWN"
},
"title": "Electron: Extension tab APIs operate across session boundaries"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70602",
"datePublished": "2026-08-05T15:54:49.931Z",
"dateReserved": "2026-08-04T19:50:27.328Z",
"dateUpdated": "2026-08-05T16:13:06.513Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70601 (GCVE-0-2026-70601)
Vulnerability from cvelistv5
Published
2026-08-05 15:45
Modified
2026-08-05 17:30
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-693 - Protection Mechanism Failure
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5, apps that expose Promise-returning functions to web content via contextBridge may be vulnerable to a context isolation bypass. Untrusted web content could obtain access to the isolated preload world and, through it, every capability the preload script has. In renderers without a sandbox, or with nodeIntegration enabled, this may escalate to Node.js access. Apps are affected if they expose Promise-returning functions via contextBridge, the standard pattern for wrapping ipcRenderer.invoke, in windows that load untrusted content. This issue is fixed in versions 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70601",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T17:29:54.563592Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T17:30:28.446Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.9"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.2"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.2"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5, apps that expose Promise-returning functions to web content via contextBridge may be vulnerable to a context isolation bypass. Untrusted web content could obtain access to the isolated preload world and, through it, every capability the preload script has. In renderers without a sandbox, or with nodeIntegration enabled, this may escalate to Node.js access. Apps are affected if they expose Promise-returning functions via contextBridge, the standard pattern for wrapping ipcRenderer.invoke, in windows that load untrusted content. This issue is fixed in versions 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693: Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T15:45:31.315Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-h7rp-cf8h-j98x",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-h7rp-cf8h-j98x"
}
],
"source": {
"advisory": "GHSA-h7rp-cf8h-j98x",
"discovery": "UNKNOWN"
},
"title": "Electron: Context isolation bypass via Function.prototype.bind hijack"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70601",
"datePublished": "2026-08-05T15:45:31.315Z",
"dateReserved": "2026-08-04T19:50:27.328Z",
"dateUpdated": "2026-08-05T17:30:28.446Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70600 (GCVE-0-2026-70600)
Vulnerability from cvelistv5
Published
2026-08-05 15:40
Modified
2026-08-06 14:21
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-1021 - Improper Restriction of Rendered UI Layers or Frames
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the native autofill popup could be positioned by a cross-origin iframe outside that iframe's bounds, over the embedding page's UI, enabling clickjacking or spoofing of trusted UI. Apps are only affected if they embed untrusted content in iframes within windows that also display trusted UI. Apps that do not embed untrusted third-party content are not affected. This issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70600",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-06T14:21:34.549765Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T14:21:44.543Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.8"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.0"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.1"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the native autofill popup could be positioned by a cross-origin iframe outside that iframe\u0027s bounds, over the embedding page\u0027s UI, enabling clickjacking or spoofing of trusted UI. Apps are only affected if they embed untrusted content in iframes within windows that also display trusted UI. Apps that do not embed untrusted third-party content are not affected. This issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1021",
"description": "CWE-1021: Improper Restriction of Rendered UI Layers or Frames",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T15:40:27.570Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-x8rc-wpg4-grpf",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-x8rc-wpg4-grpf"
}
],
"source": {
"advisory": "GHSA-x8rc-wpg4-grpf",
"discovery": "UNKNOWN"
},
"title": "Electron: Cross-origin iframe can position native autofill popup"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70600",
"datePublished": "2026-08-05T15:40:27.570Z",
"dateReserved": "2026-08-04T19:50:27.328Z",
"dateUpdated": "2026-08-06T14:21:44.543Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70599 (GCVE-0-2026-70599)
Vulnerability from cvelistv5
Published
2026-08-05 15:36
Modified
2026-08-05 18:41
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-346 - Origin Validation Error
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, serial-port and media permission checks made from an iframe passed the top-level frame origin to session.setPermissionCheckHandler instead of the requesting iframe origin. Origin-based handler logic could grant a cross-origin iframe device access intended only for the top-level origin. This issue is fixed in 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1.
References
| URL | Tags | |
|---|---|---|
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70599",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T18:13:54.699962Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T18:41:57.567Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.7"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.0"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.0"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, serial-port and media permission checks made from an iframe passed the top-level frame origin to session.setPermissionCheckHandler instead of the requesting iframe origin. Origin-based handler logic could grant a cross-origin iframe device access intended only for the top-level origin. This issue is fixed in 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T15:36:02.182Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-9pf5-hg6p-4pwp",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-9pf5-hg6p-4pwp"
},
{
"name": "https://github.com/electron/electron/commit/0cbdf2f0375466d701aa393c92e0ec29eb89ea6c",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/0cbdf2f0375466d701aa393c92e0ec29eb89ea6c"
}
],
"source": {
"advisory": "GHSA-9pf5-hg6p-4pwp",
"discovery": "UNKNOWN"
},
"title": "Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70599",
"datePublished": "2026-08-05T15:36:02.182Z",
"dateReserved": "2026-08-04T19:50:27.328Z",
"dateUpdated": "2026-08-05T18:41:57.567Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70598 (GCVE-0-2026-70598)
Vulnerability from cvelistv5
Published
2026-08-05 15:27
Modified
2026-08-05 18:15
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-125 - Out-of-bounds Read
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data received from the GPU process was not fully validated by the main process. A compromised GPU process could cause the main process to read out-of-bounds memory while producing paint event images, disclosing memory or crashing the app. This issue is fixed in 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3.
References
| URL | Tags | |
|---|---|---|
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70598",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T18:15:41.871588Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T18:15:50.518Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.10"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.0"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.1"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame data received from the GPU process was not fully validated by the main process. A compromised GPU process could cause the main process to read out-of-bounds memory while producing paint event images, disclosing memory or crashing the app. This issue is fixed in 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125: Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T15:27:24.392Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-pfmc-3mgc-p6fp",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-pfmc-3mgc-p6fp"
},
{
"name": "https://github.com/electron/electron/commit/2c24640e7b0b9c74fe9f44bce0fde138340ff4fb",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/2c24640e7b0b9c74fe9f44bce0fde138340ff4fb"
}
],
"source": {
"advisory": "GHSA-pfmc-3mgc-p6fp",
"discovery": "UNKNOWN"
},
"title": "Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70598",
"datePublished": "2026-08-05T15:27:24.392Z",
"dateReserved": "2026-08-04T19:50:27.328Z",
"dateUpdated": "2026-08-05T18:15:50.518Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70597 (GCVE-0-2026-70597)
Vulnerability from cvelistv5
Published
2026-08-05 15:21
Modified
2026-08-06 03:55
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Summary
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that enable fuse-based hardening restricting ELECTRON_RUN_AS_NODE and NODE_OPTIONS to same-signed parents rely on this check, and a local attacker could bypass it and run code inside the signed app, inheriting its TCC permissions and keychain access. This issue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.
References
| URL | Tags | |
|---|---|---|
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-70597",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T03:55:28.858Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "electron",
"vendor": "electron",
"versions": [
{
"status": "affected",
"version": "\u003c 39.8.8"
},
{
"status": "affected",
"version": "\u003e= 40.0.0-alpha.1, \u003c 40.9.0"
},
{
"status": "affected",
"version": "\u003e= 41.0.0-alpha.1, \u003c 41.2.1"
},
{
"status": "affected",
"version": "\u003e= 42.0.0-alpha.1, \u003c 42.0.0-beta.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that enable fuse-based hardening restricting ELECTRON_RUN_AS_NODE and NODE_OPTIONS to same-signed parents rely on this check, and a local attacker could bypass it and run code inside the signed app, inheriting its TCC permissions and keychain access. This issue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-367",
"description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T15:23:14.524Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/electron/electron/security/advisories/GHSA-jm7p-cc5g-qwxx",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/electron/electron/security/advisories/GHSA-jm7p-cc5g-qwxx"
},
{
"name": "https://github.com/electron/electron/commit/0a6291a97d210db3733689e70a51f5711e38ed35",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/electron/electron/commit/0a6291a97d210db3733689e70a51f5711e38ed35"
}
],
"source": {
"advisory": "GHSA-jm7p-cc5g-qwxx",
"discovery": "UNKNOWN"
},
"title": "Electron: Parent process code-sign check is spoofable"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-70597",
"datePublished": "2026-08-05T15:21:11.054Z",
"dateReserved": "2026-08-04T19:50:27.328Z",
"dateUpdated": "2026-08-06T03:55:28.858Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}