Vulnerability-Lookup

CVE-2026-102677 (GCVE-0-2026-102677)

Vulnerability from cvelistv5 – Published: 2026-09-29 17:43 – Updated: 2026-10-02 12:18

Title

Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

Summary

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer could write attacker-controlled cache data and cause Electron to reuse it for a later load, executing the renderer's code in the more privileged preload context. The issue affects applications that load untrusted content. This issue is fixed in versions 42.10.0, 43.5.0, and 44.0.0-beta.6.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-02 12:18 UTC

CWE

CWE-20 - Improper Input Validation
CWE-345 - Insufficient Verification of Data Authenticity

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 8038 records in the last 180 days details

References

8 references

URL	Tags
https://github.com/electron/electron/security/adv…	x_refsource_CONFIRM
https://github.com/electron/electron/pull/52480	x_refsource_MISC
https://github.com/electron/electron/commit/00045…	x_refsource_MISC
https://github.com/electron/electron/commit/25ba8…	x_refsource_MISC
https://github.com/electron/electron/commit/c38d6…	x_refsource_MISC
https://github.com/electron/electron/releases/tag…	x_refsource_MISC
https://github.com/electron/electron/releases/tag…	x_refsource_MISC
https://github.com/electron/electron/releases/tag…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version	CPE status
electron	electron	Affected: >= 42.3.3, < 42.10.0 Affected: >= 43.0.0-beta.1, < 43.5.0 Affected: >= 44.0.0-alpha.1, < 44.0.0-beta.6	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102677",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-02T12:18:07.959498Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-02T12:18:18.477Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "electron",
          "vendor": "electron",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 42.3.3, \u003c 42.10.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 43.0.0-beta.1, \u003c 43.5.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 44.0.0-alpha.1, \u003c 44.0.0-beta.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron\u0027s sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer could write attacker-controlled cache data and cause Electron to reuse it for a later load, executing the renderer\u0027s code in the more privileged preload context. The issue affects applications that load untrusted content. This issue is fixed in versions 42.10.0, 43.5.0, and 44.0.0-beta.6."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-345",
              "description": "CWE-345: Insufficient Verification of Data Authenticity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-29T17:43:26.960Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq"
        },
        {
          "name": "https://github.com/electron/electron/pull/52480",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electron/electron/pull/52480"
        },
        {
          "name": "https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601"
        },
        {
          "name": "https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3"
        },
        {
          "name": "https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217"
        },
        {
          "name": "https://github.com/electron/electron/releases/tag/v42.10.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electron/electron/releases/tag/v42.10.0"
        },
        {
          "name": "https://github.com/electron/electron/releases/tag/v43.5.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electron/electron/releases/tag/v43.5.0"
        },
        {
          "name": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.6",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.6"
        }
      ],
      "source": {
        "advisory": "GHSA-qmv3-fv6v-rmhq",
        "discovery": "UNKNOWN"
      },
      "title": "Electron: Sandboxed preload code cache can be poisoned by a compromised renderer"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-102677",
    "datePublished": "2026-09-29T17:43:26.960Z",
    "dateReserved": "2026-09-29T16:10:04.075Z",
    "dateUpdated": "2026-10-02T12:18:18.477Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-102677",
      "date": "2026-11-01",
      "epss": "0.00099",
      "percentile": "0.00803"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "electron",
                "vendor": "electron",
                "versions": [
                  {
                    "status": "affected",
                    "version": "\u003e= 42.3.3, \u003c 42.10.0"
                  },
                  {
                    "status": "affected",
                    "version": "\u003e= 43.0.0-beta.1, \u003c 43.5.0"
                  },
                  {
                    "status": "affected",
                    "version": "\u003e= 44.0.0-alpha.1, \u003c 44.0.0-beta.6"
                  }
                ]
              }
            ],
            "source": "security-advisories@github.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:*:*:*:*:*:node.js:*:*",
                    "matchCriteriaId": "0983EAA7-6B7F-4F8A-83DE-0F3769CC6C4A",
                    "versionEndIncluding": "42.10.0",
                    "versionStartIncluding": "42.3.3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:*:*:*:*:*:node.js:*:*",
                    "matchCriteriaId": "9079739C-BB0A-4D28-8AD4-F4558D6773B2",
                    "versionEndExcluding": "43.4.2",
                    "versionStartIncluding": "43.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha1:*:*:*:node.js:*:*",
                    "matchCriteriaId": "94D88EA0-06B8-4682-B01F-D3E1D7F6F806",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha2:*:*:*:node.js:*:*",
                    "matchCriteriaId": "796732E1-53E5-4D7F-AA0C-9CBDD29F7210",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha3:*:*:*:node.js:*:*",
                    "matchCriteriaId": "522046B0-9E6A-481A-A8B2-69AD79D61259",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha4:*:*:*:node.js:*:*",
                    "matchCriteriaId": "7073A25C-D7C8-42C6-9A19-AF45BE0CDF9F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha5:*:*:*:node.js:*:*",
                    "matchCriteriaId": "FD3928C5-4200-4CA6-864C-2537CFCF1039",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha6:*:*:*:node.js:*:*",
                    "matchCriteriaId": "F2E8594F-E690-47D9-BFB9-22E127F4EEC8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha7:*:*:*:node.js:*:*",
                    "matchCriteriaId": "3106D6D5-37B3-4422-AB92-95E81B8B18F3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha8:*:*:*:node.js:*:*",
                    "matchCriteriaId": "990B95FF-4B70-4E2A-9ADE-96DB4FD83F58",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha9:*:*:*:node.js:*:*",
                    "matchCriteriaId": "550B3853-4CD1-491C-9C66-E3DBDEF5415F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:beta1:*:*:*:node.js:*:*",
                    "matchCriteriaId": "F3DCC540-D8FC-4602-8150-4F5FA7E6AE8F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:beta2:*:*:*:node.js:*:*",
                    "matchCriteriaId": "A6DBFDE8-90FE-47A1-9311-CDADB8598818",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:beta3:*:*:*:node.js:*:*",
                    "matchCriteriaId": "42385506-40E0-4520-86B8-7EA679DD68F5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:beta4:*:*:*:node.js:*:*",
                    "matchCriteriaId": "2061B84C-AC6C-4F81-B14B-EA747246A048",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:beta5:*:*:*:node.js:*:*",
                    "matchCriteriaId": "48A97AF4-2C03-425F-ABB4-50D522C1426D",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron\u0027s sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer could write attacker-controlled cache data and cause Electron to reuse it for a later load, executing the renderer\u0027s code in the more privileged preload context. The issue affects applications that load untrusted content. This issue is fixed in versions 42.10.0, 43.5.0, and 44.0.0-beta.6."
          }
        ],
        "id": "CVE-2026-102677",
        "lastModified": "2026-10-08T20:24:30.737",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.1,
              "impactScore": 6.0,
              "source": "security-advisories@github.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.0,
              "impactScore": 6.0,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-102677",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-02T12:18:07.959498Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-09-29T18:17:09.573",
        "references": [
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Patch"
            ],
            "url": "https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Patch"
            ],
            "url": "https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Patch"
            ],
            "url": "https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Issue Tracking",
              "Patch"
            ],
            "url": "https://github.com/electron/electron/pull/52480"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Release Notes"
            ],
            "url": "https://github.com/electron/electron/releases/tag/v42.10.0"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Release Notes"
            ],
            "url": "https://github.com/electron/electron/releases/tag/v43.5.0"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Release Notes"
            ],
            "url": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.6"
          },
          {
            "source": "security-advisories@github.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq"
          }
        ],
        "sourceIdentifier": "security-advisories@github.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-20"
              },
              {
                "lang": "en",
                "value": "CWE-345"
              }
            ],
            "source": "security-advisories@github.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-10-08T22:40:09+00:00",
      "cve": "CVE-2026-102677",
      "id": "CVE-2026-102677",
      "initial_release_date": "2026-09-29T17:43:26.960000+00:00",
      "product_status:known_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "electron: Electron: Privilege escalation via sandboxed preload code cache poisoning",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102677.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-102677",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-02T12:18:07.959498Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-02T12:18:14.080Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "electron",
              "vendor": "electron",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 42.3.3, \u003c 42.10.0"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 43.0.0-beta.1, \u003c 43.5.0"
                },
                {
                  "status": "affected",
                  "version": "\u003e= 44.0.0-alpha.1, \u003c 44.0.0-beta.6"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron\u0027s sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer could write attacker-controlled cache data and cause Electron to reuse it for a later load, executing the renderer\u0027s code in the more privileged preload context. The issue affects applications that load untrusted content. This issue is fixed in versions 42.10.0, 43.5.0, and 44.0.0-beta.6."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-20",
                  "description": "CWE-20: Improper Input Validation",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-345",
                  "description": "CWE-345: Insufficient Verification of Data Authenticity",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-29T17:43:26.960Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq"
            },
            {
              "name": "https://github.com/electron/electron/pull/52480",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/electron/electron/pull/52480"
            },
            {
              "name": "https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601"
            },
            {
              "name": "https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3"
            },
            {
              "name": "https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217"
            },
            {
              "name": "https://github.com/electron/electron/releases/tag/v42.10.0",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/electron/electron/releases/tag/v42.10.0"
            },
            {
              "name": "https://github.com/electron/electron/releases/tag/v43.5.0",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/electron/electron/releases/tag/v43.5.0"
            },
            {
              "name": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.6",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.6"
            }
          ],
          "source": {
            "advisory": "GHSA-qmv3-fv6v-rmhq",
            "discovery": "UNKNOWN"
          },
          "title": "Electron: Sandboxed preload code cache can be poisoned by a compromised renderer"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-102677",
        "datePublished": "2026-09-29T17:43:26.960Z",
        "dateReserved": "2026-09-29T16:10:04.075Z",
        "dateUpdated": "2026-10-02T12:18:18.477Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-1433

Vulnerability from certfr_avis - Published: 2026-10-30 - Updated: 2026-10-30

De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
IBM	Sterling File Gateway	Sterling File Gateway versions 6.2.2.x antérieures à 6.2.2.2
IBM	Sterling File Gateway	Sterling File Gateway versions 6.2.1.x antérieures à 6.2.1.3
IBM	Db2	Db2 Developer Extension versions antérieures à 1.2.1
IBM	QRadar SIEM	QRadar SIEM versions antérieures à 7.6.0.6
IBM	Db2	Db2 Bridge versions antérieures à 1.1.5.3
IBM	QRadar Hub	QRadar Hub versions antérieures à 3.9.2
IBM	Sterling B2B Integrator	Sterling B2B Integrator versions 6.2.1.x antérieures à 6.2.1.3
IBM	QRadar SOAR	QRadar SOAR versions antérieures à 51.0.11.2
IBM	Sterling B2B Integrator	Sterling B2B Integrator versions 6.2.2.x antérieures à 6.2.2.2

References

Title

Publication Time

Tags

Bulletin de sécurité IBM 7294579	2026-10-28	vendor-advisory
Bulletin de sécurité IBM 7293989	2026-10-25	vendor-advisory
Bulletin de sécurité IBM 7294081	2026-10-26	vendor-advisory
Bulletin de sécurité IBM 7294576	2026-10-28	vendor-advisory
Bulletin de sécurité IBM 7294184	2026-10-27	vendor-advisory
Bulletin de sécurité IBM 7294158	2026-10-26	vendor-advisory
Bulletin de sécurité IBM 7294185	2026-10-27	vendor-advisory
Bulletin de sécurité IBM 7294388	2026-10-28	vendor-advisory
Bulletin de sécurité IBM 7293813	2026-10-23	vendor-advisory
Bulletin de sécurité IBM 7294083	2026-10-26	vendor-advisory
Bulletin de sécurité IBM 7293670	2026-10-23	vendor-advisory
Bulletin de sécurité IBM 7294156	2026-10-26	vendor-advisory
Bulletin de sécurité IBM 7294172	2026-10-26	vendor-advisory
Bulletin de sécurité IBM 7294076	2026-10-26	vendor-advisory
Bulletin de sécurité IBM 7293677	2026-10-26	vendor-advisory
Bulletin de sécurité IBM 7294386	2026-10-28	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Sterling File Gateway versions 6.2.2.x ant\u00e9rieures \u00e0 6.2.2.2",
      "product": {
        "name": "Sterling File Gateway",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling File Gateway versions 6.2.1.x ant\u00e9rieures \u00e0 6.2.1.3",
      "product": {
        "name": "Sterling File Gateway",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 Developer Extension versions ant\u00e9rieures \u00e0 1.2.1",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar SIEM versions ant\u00e9rieures \u00e0 7.6.0.6",
      "product": {
        "name": "QRadar SIEM",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 Bridge versions ant\u00e9rieures \u00e0 1.1.5.3",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar Hub versions ant\u00e9rieures \u00e0 3.9.2",
      "product": {
        "name": "QRadar Hub",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling B2B Integrator versions 6.2.1.x ant\u00e9rieures \u00e0 6.2.1.3",
      "product": {
        "name": "Sterling B2B Integrator",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar SOAR versions ant\u00e9rieures \u00e0 51.0.11.2",
      "product": {
        "name": "QRadar SOAR",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling B2B Integrator versions 6.2.2.x ant\u00e9rieures \u00e0 6.2.2.2",
      "product": {
        "name": "Sterling B2B Integrator",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-101904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101904"
    },
    {
      "name": "CVE-2026-77791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77791"
    },
    {
      "name": "CVE-2026-85394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85394"
    },
    {
      "name": "CVE-2026-101902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101902"
    },
    {
      "name": "CVE-2026-76183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76183"
    },
    {
      "name": "CVE-2026-54514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54514"
    },
    {
      "name": "CVE-2026-97687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97687"
    },
    {
      "name": "CVE-2026-91776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91776"
    },
    {
      "name": "CVE-2026-109619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109619"
    },
    {
      "name": "CVE-2026-102677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102677"
    },
    {
      "name": "CVE-2026-77756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77756"
    },
    {
      "name": "CVE-2026-54516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54516"
    },
    {
      "name": "CVE-2026-54515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54515"
    },
    {
      "name": "CVE-2026-109618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109618"
    },
    {
      "name": "CVE-2026-104056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104056"
    },
    {
      "name": "CVE-2026-68497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-68497"
    },
    {
      "name": "CVE-2026-96760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-96760"
    },
    {
      "name": "CVE-2024-33663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-33663"
    },
    {
      "name": "CVE-2026-102276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102276"
    },
    {
      "name": "CVE-2026-17495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-17495"
    },
    {
      "name": "CVE-2026-73633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73633"
    },
    {
      "name": "CVE-2026-84292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84292"
    },
    {
      "name": "CVE-2026-101908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101908"
    },
    {
      "name": "CVE-2026-101907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101907"
    },
    {
      "name": "CVE-2026-101906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101906"
    },
    {
      "name": "CVE-2026-102278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102278"
    },
    {
      "name": "CVE-2026-84394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84394"
    },
    {
      "name": "CVE-2026-89425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89425"
    },
    {
      "name": "CVE-2026-77762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77762"
    },
    {
      "name": "CVE-2026-78383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78383"
    },
    {
      "name": "CVE-2026-101898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101898"
    },
    {
      "name": "CVE-2026-86350",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86350"
    },
    {
      "name": "CVE-2026-54512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
    },
    {
      "name": "CVE-2026-101909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101909"
    },
    {
      "name": "CVE-2026-101901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101901"
    },
    {
      "name": "CVE-2022-24785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24785"
    },
    {
      "name": "CVE-2026-91777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91777"
    },
    {
      "name": "CVE-2026-102277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102277"
    },
    {
      "name": "CVE-2026-93749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-93749"
    },
    {
      "name": "CVE-2026-101905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101905"
    },
    {
      "name": "CVE-2026-59888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59888"
    },
    {
      "name": "CVE-2026-78437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78437"
    },
    {
      "name": "CVE-2026-73634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73634"
    },
    {
      "name": "CVE-2026-97689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97689"
    },
    {
      "name": "CVE-2026-54517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54517"
    },
    {
      "name": "CVE-2026-73635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73635"
    },
    {
      "name": "CVE-2026-54513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
    },
    {
      "name": "CVE-2026-54518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-54518"
    },
    {
      "name": "CVE-2026-101903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101903"
    },
    {
      "name": "CVE-2026-75973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-75973"
    },
    {
      "name": "CVE-2026-86472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86472"
    },
    {
      "name": "CVE-2026-89407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-89407"
    },
    {
      "name": "CVE-2026-19032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19032"
    },
    {
      "name": "CVE-2026-101900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-101900"
    },
    {
      "name": "CVE-2026-97688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97688"
    },
    {
      "name": "CVE-2026-79677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-79677"
    },
    {
      "name": "CVE-2026-73581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-73581"
    },
    {
      "name": "CVE-2026-41293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41293"
    },
    {
      "name": "CVE-2026-83557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-83557"
    },
    {
      "name": "CVE-2026-77310",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-77310"
    },
    {
      "name": "CVE-2026-87022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87022"
    },
    {
      "name": "CVE-2026-59889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-59889"
    }
  ],
  "initial_release_date": "2026-10-30T00:00:00",
  "last_revision_date": "2026-10-30T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1433",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": "2026-10-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294579",
      "url": "https://www.ibm.com/support/pages/node/7294579"
    },
    {
      "published_at": "2026-10-25",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7293989",
      "url": "https://www.ibm.com/support/pages/node/7293989"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294081",
      "url": "https://www.ibm.com/support/pages/node/7294081"
    },
    {
      "published_at": "2026-10-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294576",
      "url": "https://www.ibm.com/support/pages/node/7294576"
    },
    {
      "published_at": "2026-10-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294184",
      "url": "https://www.ibm.com/support/pages/node/7294184"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294158",
      "url": "https://www.ibm.com/support/pages/node/7294158"
    },
    {
      "published_at": "2026-10-27",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294185",
      "url": "https://www.ibm.com/support/pages/node/7294185"
    },
    {
      "published_at": "2026-10-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294388",
      "url": "https://www.ibm.com/support/pages/node/7294388"
    },
    {
      "published_at": "2026-10-23",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7293813",
      "url": "https://www.ibm.com/support/pages/node/7293813"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294083",
      "url": "https://www.ibm.com/support/pages/node/7294083"
    },
    {
      "published_at": "2026-10-23",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7293670",
      "url": "https://www.ibm.com/support/pages/node/7293670"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294156",
      "url": "https://www.ibm.com/support/pages/node/7294156"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294172",
      "url": "https://www.ibm.com/support/pages/node/7294172"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294076",
      "url": "https://www.ibm.com/support/pages/node/7294076"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7293677",
      "url": "https://www.ibm.com/support/pages/node/7293677"
    },
    {
      "published_at": "2026-10-28",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7294386",
      "url": "https://www.ibm.com/support/pages/node/7294386"
    }
  ]
}

FKIE_CVE-2026-102677

Vulnerability from fkie_nvd - Published: 2026-09-29 18:17 - Updated: 2026-10-08 20:24

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
8.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Summary

References

URL	Tags
security-advisories@github.com	https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601	Patch
security-advisories@github.com	https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3	Patch
security-advisories@github.com	https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217	Patch
security-advisories@github.com	https://github.com/electron/electron/pull/52480	Issue Tracking, Patch
security-advisories@github.com	https://github.com/electron/electron/releases/tag/v42.10.0	Release Notes
security-advisories@github.com	https://github.com/electron/electron/releases/tag/v43.5.0	Release Notes
security-advisories@github.com	https://github.com/electron/electron/releases/tag/v44.0.0-beta.6	Release Notes
security-advisories@github.com	https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq	Vendor Advisory

Impacted products

Vendor	Product	Version
electronjs	electron	*
electronjs	electron	*
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0
electronjs	electron	44.0.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "electron",
          "vendor": "electron",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 42.3.3, \u003c 42.10.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 43.0.0-beta.1, \u003c 43.5.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 44.0.0-alpha.1, \u003c 44.0.0-beta.6"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:electronjs:electron:*:*:*:*:*:node.js:*:*",
              "matchCriteriaId": "0983EAA7-6B7F-4F8A-83DE-0F3769CC6C4A",
              "versionEndIncluding": "42.10.0",
              "versionStartIncluding": "42.3.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:*:*:*:*:*:node.js:*:*",
              "matchCriteriaId": "9079739C-BB0A-4D28-8AD4-F4558D6773B2",
              "versionEndExcluding": "43.4.2",
              "versionStartIncluding": "43.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha1:*:*:*:node.js:*:*",
              "matchCriteriaId": "94D88EA0-06B8-4682-B01F-D3E1D7F6F806",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha2:*:*:*:node.js:*:*",
              "matchCriteriaId": "796732E1-53E5-4D7F-AA0C-9CBDD29F7210",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha3:*:*:*:node.js:*:*",
              "matchCriteriaId": "522046B0-9E6A-481A-A8B2-69AD79D61259",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha4:*:*:*:node.js:*:*",
              "matchCriteriaId": "7073A25C-D7C8-42C6-9A19-AF45BE0CDF9F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha5:*:*:*:node.js:*:*",
              "matchCriteriaId": "FD3928C5-4200-4CA6-864C-2537CFCF1039",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha6:*:*:*:node.js:*:*",
              "matchCriteriaId": "F2E8594F-E690-47D9-BFB9-22E127F4EEC8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha7:*:*:*:node.js:*:*",
              "matchCriteriaId": "3106D6D5-37B3-4422-AB92-95E81B8B18F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha8:*:*:*:node.js:*:*",
              "matchCriteriaId": "990B95FF-4B70-4E2A-9ADE-96DB4FD83F58",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:alpha9:*:*:*:node.js:*:*",
              "matchCriteriaId": "550B3853-4CD1-491C-9C66-E3DBDEF5415F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:beta1:*:*:*:node.js:*:*",
              "matchCriteriaId": "F3DCC540-D8FC-4602-8150-4F5FA7E6AE8F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:beta2:*:*:*:node.js:*:*",
              "matchCriteriaId": "A6DBFDE8-90FE-47A1-9311-CDADB8598818",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:beta3:*:*:*:node.js:*:*",
              "matchCriteriaId": "42385506-40E0-4520-86B8-7EA679DD68F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:beta4:*:*:*:node.js:*:*",
              "matchCriteriaId": "2061B84C-AC6C-4F81-B14B-EA747246A048",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:electronjs:electron:44.0.0:beta5:*:*:*:node.js:*:*",
              "matchCriteriaId": "48A97AF4-2C03-425F-ABB4-50D522C1426D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron\u0027s sandboxed preload code cache did not verify that a cached entry matched the preload it was served for. A compromised renderer could write attacker-controlled cache data and cause Electron to reuse it for a later load, executing the renderer\u0027s code in the more privileged preload context. The issue affects applications that load untrusted content. This issue is fixed in versions 42.10.0, 43.5.0, and 44.0.0-beta.6."
    }
  ],
  "id": "CVE-2026-102677",
  "lastModified": "2026-10-08T20:24:30.737",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.1,
        "impactScore": 6.0,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.0,
        "impactScore": 6.0,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-102677",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-10-02T12:18:07.959498Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-09-29T18:17:09.573",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://github.com/electron/electron/pull/52480"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Release Notes"
      ],
      "url": "https://github.com/electron/electron/releases/tag/v42.10.0"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Release Notes"
      ],
      "url": "https://github.com/electron/electron/releases/tag/v43.5.0"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Release Notes"
      ],
      "url": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.6"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        },
        {
          "lang": "en",
          "value": "CWE-345"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

GHSA-QMV3-FV6V-RMHQ

Vulnerability from github – Published: 2026-09-29 18:02 – Updated: 2026-09-29 18:02

Summary

Electron: Sandboxed preload code cache can be poisoned by a compromised renderer

Details

Impact

The cache Electron keeps for sandboxed preload scripts did not verify that a cached entry matched the preload it was served for. A compromised renderer could use this to run its own code in the preload context on a later load.

Apps are only affected if they load untrusted content. Apps that do not load untrusted content are not affected.

Workarounds

There are no app side workarounds, you must update to a patched version of Electron.

Fixed Versions

44.0.0-beta.6
43.5.0
42.10.0

For more information

If you have any questions or comments about this advisory, email us at security@electronjs.org

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "electron"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "42.3.3"
            },
            {
              "fixed": "42.10.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "npm",
        "name": "electron"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "43.0.0-beta.1"
            },
            {
              "fixed": "43.5.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "npm",
        "name": "electron"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "44.0.0-alpha.1"
            },
            {
              "fixed": "44.0.0-beta.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-102677"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20",
      "CWE-345"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-09-29T18:02:01Z",
    "nvd_published_at": null,
    "severity": "HIGH"
  },
  "details": "### Impact\n\nThe cache Electron keeps for sandboxed preload scripts did not verify that a cached entry matched the preload it was served for. A compromised renderer could use this to run its own code in the preload context on a later load.\n\nApps are only affected if they load untrusted content. Apps that do not load untrusted content are not affected.\n\n### Workarounds\n\nThere are no app side workarounds, you must update to a patched version of Electron.\n\n### Fixed Versions\n\n* `44.0.0-beta.6`\n* `43.5.0 `\n* `42.10.0`\n\n### For more information\n\nIf you have any questions or comments about this advisory, email us at [security@electronjs.org](mailto:security@electronjs.org)",
  "id": "GHSA-qmv3-fv6v-rmhq",
  "modified": "2026-09-29T18:02:01Z",
  "published": "2026-09-29T18:02:01Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/electron/electron/security/advisories/GHSA-qmv3-fv6v-rmhq"
    },
    {
      "type": "WEB",
      "url": "https://github.com/electron/electron/pull/52480"
    },
    {
      "type": "WEB",
      "url": "https://github.com/electron/electron/commit/000453e399bd1dee5e86376cdd9ece5fc071e601"
    },
    {
      "type": "WEB",
      "url": "https://github.com/electron/electron/commit/06a12a87a23f40abbf580fc7a552bc1189812c45"
    },
    {
      "type": "WEB",
      "url": "https://github.com/electron/electron/commit/25ba8be57c65a83d8c14ebb8aa37693df17a04f3"
    },
    {
      "type": "WEB",
      "url": "https://github.com/electron/electron/commit/c38d6fd68756f04647ea857bdb6a2abec332e217"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/electron/electron"
    },
    {
      "type": "WEB",
      "url": "https://github.com/electron/electron/releases/tag/v42.10.0"
    },
    {
      "type": "WEB",
      "url": "https://github.com/electron/electron/releases/tag/v43.5.0"
    },
    {
      "type": "WEB",
      "url": "https://github.com/electron/electron/releases/tag/v44.0.0-beta.6"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Electron: Sandboxed preload code cache can be poisoned by a compromised renderer"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-102677 (GCVE-0-2026-102677)

CERTFR-2026-AVI-1433

Solutions

FKIE_CVE-2026-102677

GHSA-QMV3-FV6V-RMHQ

Impact

Workarounds

Fixed Versions

For more information

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour