CVE-2026-102676

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.

Electron

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron guest could enable nodeIntegrationInWorker for its Web Workers even when the unsandboxed embedder had Node.js integration disabled, allowing untrusted guest content to create a Node-enabled worker with more privilege than the embedder granted. Applications that do not enable the tag or that keep the embedder…

29. Sep 2026

Ausgewertete Quellen

• NVD
  CVE-2026-102676
• GitHub
  https://github.com/electron/electron/security/advisories/GHSA-9qh4-3jw8-366w